Anonymized sample
Starter Package report — marketplace app
Practice audit · vibe-coded app · URL redacted
Overall verdict
🟡 Needs a few fixes before sharing publicly
Polished at first glance — custom branding, booking, search, auth. Dev-only features still visible on the live URL, and the main booking flow dead-ends. Fix critical items before sharing outside your test circle.
7 findings below, sorted by severity. Written in plain English — technical wording only in the fix prompts you paste into your builder. Real reports include screenshots.
🔴 Critical
Dev login bypass visible to everyone
What we saw: On /auth, a "Dev Bypass (Skip Login)" button lets anyone pick a role and sign in without credentials.
Why it matters: Anyone with your link can skip authentication.
+ Full Lovable fix prompt in delivered report
Developer Tools on the homepage
What we saw: "Seed Sample Data" and "Clear My Data" visible after sign-in.
Why it matters: Real users will think the product is unfinished.
Copy-paste fix prompt (example from a real report)
Remove all developer-only buttons from the production homepage. Hide "Seed Sample Data" and "Clear My Data" unless the environment is development. Add a production-safe check so these controls never appear on the live public URL.
🟠 High
Missing /privacy and /terms (404)
Trust gap for an app that collects bookings and accounts.
Placeholder host name on every listing
All cards show "Hosted by Local Host" instead of real host names.
Starter Package reports also include a one-page Quick Start Guide for your users. Full Package ($29) adds more findings plus a cross-user data check with two test accounts.
Get Starter Package — $9