Mercury Builder Pro — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mercury Builder Pro (Agent Skill) and scored it 92/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 2 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 2 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
URL: https://lovable.dev/projects/bc5f0a45-f6d8-495a-8ac7-81047b4a4121
There are several ways of editing your application.
Use Lovable
Simply visit the Lovable Project and start prompting.
Changes made via Lovable will be committed automatically to this repo.
Use your preferred IDE
If you want to work locally using your own IDE, you can clone this repo and push changes. Pushed changes will also be reflected in Lovable.
The only requirement is having Node.js & npm installed - install with nvm
Follow these steps:
# Step 1: Clone the repository using the project's Git URL.
git clone <YOUR_GIT_URL>
# Step 2: Navigate to the project directory.
cd <YOUR_PROJECT_NAME>
# Step 3: Install the necessary dependencies.
npm i
# Step 4: Start the development server with auto-reloading and an instant preview.
npm run devEdit a file directly in GitHub
Use GitHub Codespaces
This project is built with:
Simply open Lovable and click on Share -> Publish.
Inventory is synced directly from Lightspeed DMS (the mercury_motor_inventory view). For a manual sync, use:
curl -X POST \
https://eutsoqdpjurknjsshxes.supabase.co/functions/v1/sync-lightspeed-inventory \
-H "Authorization: Bearer YOUR_SERVICE_ROLE_KEY" \
-H "Content-Type: application/json" \
-d '{"trigger":"manual"}'Note: Service role key can be found in Supabase Dashboard → Settings → API → Service Role Key (secret)
Lightspeed sync runs automatically daily at 5:00 AM UTC via Supabase pg_cron, with SMS failure alerts to ADMIN_PHONE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.