Code Quality

Pre-Publish Security Gate

Runs the complete security checklist before you ship

About this skill

Pre-Publish Security Gate

The last checkpoint before your Lovable project goes live. Runs a comprehensive security and quality checklist, ranks findings by severity, and recommends whether to publish or hold.

What it checks

  • Authentication and authorization on every protected route
  • RLS enabled on every table with proper policies
  • No hardcoded secrets anywhere in the codebase
  • Input validation on every form and endpoint
  • Error handling with no stack trace leakage
  • Rate limiting on auth and expensive endpoints
  • Payment integration security if applicable
  • UX polish (error states, loading states, empty states)
  • SEO basics (titles, meta tags, OG images)
  • Legal pages if required

Output

Produces a verdict: GO or HOLD. A HOLD means stop, fix the critical issues, run the gate again before publishing.

Free skill from EmergeStack

This is the lead skill. If useful, check the full EmergeStack methodology at emergestack.dev.

SKILL.md preview

---
name: pre-publish-security-gate
description: Use BEFORE publishing or deploying a Lovable project to production. Runs the complete security and quality checklist with verdict.
---

# Pre-Publish Security Gate

The last checkpoint before your Lovable project goes live.