Routrel Audit
Paste the Kotlin behind one Ktor service - the Application module, routes, services, Exposed tables and repositories - and get a free in-browser check (22 rules: routes outside authenticate, runBlocking in handlers, CORS anyHost with credentials, StatusPages leaks, JWT verifiers with no audience or issuer, respond without return, blocking transactions, SQL in string templates, update with no where, N+1 queries, no pool), then a server audit or a data audit with exact edits per finding, or the whole fixed files, re-checked. Derived from @affaan-m/kotlin-ktor-patterns and @affaan-m/kotlin-exposed-patterns (Affaan Mustafa, MIT). Ktor, Exposed and Kotlin are JetBrains projects; Routrel Audit is not affiliated with or endorsed by JetBrains or the Kotlin Foundation.
gpt-terra Every public app is built from a security-scanned skill and must pass a clean scan — skill and frontend — before it can be listed. Have a skill of your own? Turn it into an app — or read the step-by-step walkthrough.