Fix Pack
We tell your AI how to fix it.
Every finding comes with four things.
1
What's wrong
In plain English, no jargon.
2
Where
The exact file and line.
3
Why it matters
What could happen if you leave it.
4
The prompt
Ready to paste into the AI tool you built with.
Try it. Pick your tool.
CriticalFinding
Exposed API key in front-end code
src/lib/payments.ts:8Anyone can open your site, view the source and copy this key. They can then make charges or read data as you.
Paste this into Lovable:
Move the payments API key out of src/lib/payments.ts into a server-side secret. Create a server function that makes the payment call, and have the front end call that function instead. Rotate the old key afterwards.
Then re-scan to prove it's fixed. Your score history becomes your record of the work.