CodeGuide also provide instructions to Cursor Agent to use Supabase MCP to setup backend properly, which is good.
8/ Implementation Plan = Your step-by-step build
This is the most powerful doc in your system.
I write 50+ clear steps to build the app.
Each step is a prompt.
Cursor Agent or Windsurf then builds it like a junior dev, task-by-task.
9/ Run security audits before shipping
To keep your MVP secure by default, I generate a custom security_guideline.mdc doc using @CodeGuidedev
Then inside Cursor or Windsurf:
- Attach this doc to your project
- Switch to Gemini Pro 2.5 (it handles full codebase scans)
- Prompt: “Run a complete security test across the entire codebase. List all vulnerabilities and give clear steps to fix each one.”
It gives you a full audit report before launch, clean, detailed, and dev-ready.
10/ Final Takeaway
AI should never plan your product. That’s your job.
But once you build the right context boundary, it becomes your fastest, cleanest dev copilot.
Build with coding docs. Prompt with clarity. Let AI write the code.
Bookmark this.
It’ll help you for your next project.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
Everyone’s building with Cursor. Almost no one’s doing it right.
It’s not bad prompts that kill MVPs.
It’s the lack of a system.
Here are 7 hard lessons from building 17+ MVPs with Bolt, Cursor, and Supabase.
Bookmark this if you want to ship clean, not just fast.
1/ The wrong stack will break your MVP
AI doesn’t code like humans. It replicates patterns it’s seen before.
So if your stack is rare or messy, it’ll hallucinate.
What works for me:
- Next/ React for frontend
- Supabase for backend
- Stripe for payments
- Vercel for deploying
AI flows clean when your stack is AI-native.
2/ You don’t need a full team. You need roles and structure.
My builds follow 4 clear stages, all driven by AI:
- Planner: Draft the PRD, user flows, and tech stack using ChatGPT
- Architect: Break down features into tasks and screen logic
- Builder: Load the plan into Cursor or Windsurf and execute task by task
- Reviewer: Run security audits, test flows, clean up UI, and commit builds
Security isn’t optional.
I run this inside Cursor before shipping: rb.gy/tanzmm
This one prompt has caught dozens of silent bugs before launch.