Hackathon Lovable
PassAudited by ClawScan on May 1, 2026.
Overview
This is an instruction-only quick-start guide for building clinical prototypes in Lovable, with appropriate PHI-safety guidance and no hidden code or install behavior.
This skill appears safe to install as an instruction-only guide. Before using it with real clinical or patient data, confirm that your Lovable/Supabase setup has appropriate authentication, access controls, logging limits, and healthcare compliance; for hackathon work, prefer synthetic data.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If users put real patient or clinical data into the resulting app, that data may be handled by third-party cloud services chosen during the Lovable build process.
The skill directs clinical app builders to store and authenticate data through external cloud services. This is disclosed and purpose-aligned, but clinical data may be sensitive and requires attention to provider security and compliance boundaries.
Use Lovable Cloud (Supabase) for database and auth so you don’t manage servers... keep real data only in the database and in the running app.
Use synthetic data for hackathon prototypes unless approved otherwise, and verify Lovable/Supabase privacy, access controls, retention, and healthcare compliance before storing real PHI.