ohad6k/VibeRaven

Supabase RLS checker and security scanner for Vercel + Supabase apps (CLI + MCP server): tables without RLS, using (true) policies, service_role keys in client code, anon-callable security definer functions, missing Data API grants, env var drift, unverified Stripe webhooks. Free, local, no login.