Database

Auth

Security

Quick share — built a free tool that does AI-powered code review in your browser.

Especially useful for Supabase projects:

Catches SQL injection in RPC calls and raw queries
Finds hardcoded anon keys and service role keys
Detects missing RLS policy patterns
Reviews auth flow implementation

Try it (no signup): https://nopii.xyz/review.html

GitHub Action for CI: https://github.com/ETwithin/ai-code-review-action

Also curated 50 AI code review prompts (5 free): https://github.com/ETwithin/ai-code-review-prompts

How to help

ETwithin shares a free AI-powered code review tool that helps identify SQL injection vulnerabilities, hardcoded keys, and missing RLS policies in Supabase projects. The tool is available online without signup and includes a GitHub Action for CI. Additionally, a toolkit with prompts and scripts is offered as a PDF.

Help on GitHub

Replies (1)

UPDATE: I've published the full toolkit as a PDF. You can preview the entire thing for free before buying:

Preview PDF (free, ~35 pages)

Includes 50 prompts + 10 bash automation scripts. The online tool is still free too: https://nopii.xyz/review.html

OP

ETwithin·3/7/2026, 2:31:27 AM