7 security bugs AI agents write in Next.js + Supabase + Stripe apps (and the rules that stop them)

· Dev.to