Deleted data
Drops, truncates, and updates that would wipe or rewrite your rows.
Home / Second Opinion
Free tool
Get a second opinion before you paste that fix.
Paste the code, SQL migration, or Supabase or Firebase rules your AI tool wrote. We flag anything that could delete data, expose keys, or let strangers in, in plain English.
Updated October 27, 2026
What it checks
Five things worth a look.
Loosened security rules
Supabase and Firebase rules that would let strangers in.
Exposed keys
Secret keys and tokens sitting in the paste.
Login checks removed
Sign-in checks deleted or turned off in the change.
Obvious bugs
Unfinished notes, swallowed errors, and queries built by gluing text together.
Questions
Before you paste.
Do you store my code?
We do not store or log the text you paste. For the AI review, keys are masked and the text goes to xAI. xAI's API security FAQ (https://docs.x.ai/developers/faq/security) says xAI does not train on API inputs or outputs without permission. xAI keeps requests and responses encrypted for 30 days to check for abuse, then deletes them.
Is this a full audit?
No. This is a quick automated check of one paste. A Full Audit is $249 and takes 48 hours. A person reviews the whole app and prices every finding.
What can it read?
Code in any language, SQL migrations, Supabase policies, and Firebase security rules.
What does the verdict mean?
No red flags found means this check found nothing serious. Check first means something needs a look before you run it. Don't paste means it could delete data or expose a key.