Updated 7mo ago
by raroque
vibe-security-skill
Agent skill that audits vibe-coded apps for common security vulnerabilities introduced by AI coding assistants
1.1k GitHub stars (1,125)
+90 in 20 days
| Period | New stars |
|---|---|
| Sep 27 | 0 |
| Sep 28 | +12 |
| Sep 29 | +10 |
| Sep 30 | +13 |
| Oct 1 | 0 |
| Oct 2 | +5 |
| Oct 3 | +6 |
| Oct 4 | +3 |
| Oct 5 | +5 |
| Oct 6 | +4 |
| Oct 7 | +1 |
| Oct 8 | +2 |
| Oct 9 | +6 |
| Oct 10 | +6 |
| Oct 11 | +3 |
| Oct 12 | +2 |
| Oct 13 | +5 |
| Oct 14 | +2 |
| Oct 15 | +3 |
| Oct 16 | +2 |
- 1 skill (1 skills found in its SKILL.md files)
- 128 forks (128 forks)
- 7mo ago last update (Last updated 7mo ago)
Install
Skills CLI
npx skills add raroque/vibe-security-skill
Asks which agents to install it for. Add -g to install it for every project.
Claude Code
git clone https://github.com/raroque/vibe-security-skillcp -r "vibe-security-skill/vibe-security" ~/.claude/skills/
Copies the vibe-security skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project).
Plugin
/plugin marketplace add raroque/vibe-security-skill
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
vibe-security
Audits codebases for common security vulnerabilities that AI coding assistants introduce in "vibe-coded" applications. Checks for exposed API keys, broken access control (Supabase RLS, Firebase rules), missing auth validation, client-side trust issues, insecure payment flows, and more. Use this skill whenever the user asks about security, wants a code review, mentions "vibe coding", or when you'r…
vibe-security/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.