whatisgithub

What is launchworthy?

wunderlandmedia/launchworthy — explained in plain English

Analysis updated 2026-05-18

69PythonAudience · vibe coderComplexity · 2/5LicenseSetup · easy

In one sentence

A Claude Code skill that audits AI-built apps across five domains and produces a scored, copy-paste ready fix list before launch.

Mindmap

mindmap
  root((launchworthy))
    What it does
      Scored production audit
      Copy-paste fixes
      Stack auto-detection
    Tech stack
      Claude Code skill
      Next.js
      Supabase
      Firebase
    Use cases
      Pre-launch security check
      Fix prioritization
      Backup and recovery checks
    Audience
      Vibe coders
      Non-technical builders
    Limits
      Manual checks flagged not passed
      Needs Claude Code installed

Code map

Detail Auto

An interactive map of this repo's files and how they connect — its source is parsed live in your browser. Click Visualize to build it.

filefunction / class

What do people build with it?

USE CASE 1

Check whether an app built with Lovable, Bolt, or v0 is safe to launch.

USE CASE 2

Find security issues like disabled row level security or exposed secret keys.

USE CASE 3

Get a prioritized, copy-paste fix list before shipping to real users.

USE CASE 4

Verify backups, rollback plans, and error monitoring actually work.

What is it built with?

PythonClaude CodeNext.jsSupabaseFirebase

How does it compare?

wunderlandmedia/launchworthy8bit64k/cronalyticsalibaba-damo-academy/rynnworld-4d
Stars696969
LanguagePythonPythonPython
Setup difficultyeasyeasy
Complexity2/52/5
Audiencevibe coderops devopsresearcher

Figures from each repo's GitHub metadata at analysis time.

How do you get it running?

Difficulty · easy Time to first run · 5min

Requires Claude Code installed, the plugin adds via two commands, then you just ask in plain English for an audit.

Use freely for any purpose, including commercial use, as long as you keep the copyright notice, per the MIT license.

So what is it?

launchworthy is a Claude Code skill built for people who used an AI tool like Lovable, Bolt, v0, Cursor, or Claude Code itself to build an app, and now want to know if it is actually safe to put in front of real users. Instead of just chatting with an AI and asking it to review your code, this tool runs a structured audit across five specific areas and produces a scored report along with a prioritized list of fixes, each pointing to exact file paths with code you can copy and paste. The five areas it checks are frontend and user experience, backend and data handling, authentication and security, infrastructure and deployment, and operations and recovery. Concretely, this covers things like broken loading states, a database with row level security accidentally turned off, secret keys exposed in the browser bundle, missing backups, and whether you could actually recover if something went wrong. The tool automatically figures out what framework and backend you are using, among options like Next.js, SvelteKit, Astro, Supabase, and Firebase, and adjusts its checks to match. What makes this different from just asking an AI to review your code is that it refuses to mark something as safe unless it can actually verify it. Anything it cannot check itself is labeled as needing manual verification rather than being assumed fine, and if you insist something is okay without proof, it records that as unverified rather than turning the item green. It also pushes back on common excuses like calling something "just an MVP," since those are exactly the situations that tend to lead to real security problems. Getting started involves installing Claude Code, then adding this project as a plugin with two simple commands, after which you can simply ask in plain English whether your app is production ready. It then runs the audit and writes a scored report you can act on. The project is released under the MIT license and works across many different app stacks rather than being tied to one specific framework.

Copy-paste prompts

Prompt 1
Install the launchworthy plugin in Claude Code and run it against my project.
Prompt 2
Ask launchworthy whether my Supabase app is secure before launch.
Prompt 3
Explain what the five audit domains in launchworthy check for.
Prompt 4
Show me an example launchworthy scorecard and how to read WARN versus FAIL.
Prompt 5
Help me fix the critical findings launchworthy reported in my auth and security domain.

Frequently asked questions

What is launchworthy?

A Claude Code skill that audits AI-built apps across five domains and produces a scored, copy-paste ready fix list before launch.

What language is launchworthy written in?

Mainly Python. The stack also includes Python, Claude Code, Next.js.

What license does launchworthy use?

Use freely for any purpose, including commercial use, as long as you keep the copyright notice, per the MIT license.

How hard is launchworthy to set up?

Setup difficulty is rated easy, with roughly 5min to a first successful run.

Who is launchworthy for?

Mainly vibe coder.

Open on GitHub → Ask about another repo

This repo across BitVibe Labs

Verify against the repo before relying on details.