---
title: "VibeVigil (@vibevigil) | Hashnode"
description: "Security checks for apps built with AI tools. Read the latest articles by VibeVigil on Hashnode."
url: "https://hashnode.com/@vibevigil"
---

@vibevigil

# VibeVigil

@vibevigil · Joined November 2026

Security checks for apps built with AI tools

### [How to Check if Your Vibe-Coded App Is Leaking API Keys](https://vibevigil.hashnode.dev/how-to-check-if-your-vibe-coded-app-is-leaking-api-keys?utm_source=hashnode&utm_medium=feed)

A plain-English checklist to find secret API keys hiding in your Lovable, Bolt, v0, or Cursor app: in the browser code, in .env files, in source maps, and in GitHub history. Plus what to do if you find one.

9 min read · [vibevigil.hashnode.dev](https://vibevigil.hashnode.dev/how-to-check-if-your-vibe-coded-app-is-leaking-api-keys?utm_source=hashnode&utm_medium=feed)

[18h ago](https://hashnode.com/posts/how-to-check-if-your-vibe-coded-app-is-leaking-api-keys/6af3e367235834698e64b5bb)

### [How to Check if Supabase RLS Is Enabled (and Actually Working)](https://vibevigil.hashnode.dev/how-to-check-if-supabase-rls-is-enabled-and-actually-working?utm_source=hashnode&utm_medium=feed)

A plain-English checklist to see if Row Level Security is on for every Supabase table, find policies that let everyone in, and fix it with a copy-paste prompt for your coding agent.

9 min read · [vibevigil.hashnode.dev](https://vibevigil.hashnode.dev/how-to-check-if-supabase-rls-is-enabled-and-actually-working?utm_source=hashnode&utm_medium=feed)

[18h ago](https://hashnode.com/posts/how-to-check-if-supabase-rls-is-enabled-and-actually-working/6af3e2b0db88ad0285e076f2)