测试与安全

vibe-security-skill

reason-machines/security-skills

Agent skill that audits vibe-coded apps for common security vulnerabilities introduced by AI coding assistants

  • 1137 次安装
  • 12 星标
  • 收录于

安装命令

npx skills add https://github.com/reason-machines/security-skills --skill vibe-security-skill

SKILL.md

Vibe Security Skill

Skill by ara.so — Security Skills collection.

This skill provides expertise in using the Vibe Security tool to audit vibe-coded applications for common security vulnerabilities that AI coding assistants frequently introduce. It helps identify hardcoded secrets, missing RLS policies, insecure auth patterns, payment vulnerabilities, and other security anti-patterns.

What Vibe Security Does

Vibe Security is an agent skill that scans codebases for security vulnerability patterns common in AI-generated code. It uses technology-specific reference files to audit only relevant parts of your stack (Supabase, Stripe, React Native, etc.), catching issues like:

  • Hardcoded API keys and secrets
  • Disabled or missing Row-Level Security (RLS) policies
  • Insecure authentication patterns
  • Client-submitted payment amounts
  • Missing rate limiting
  • Tokens stored in localStorage
  • Exposed secrets in mobile bundles
  • AI API keys without usage caps

Vibe Security Skill

Skill by ara.so — Security Skills collection.

This skill provides expertise in using the Vibe Security tool to audit vibe-coded applications for common security vulnerabilities that AI coding assistants frequently introduce. It helps identify hardcoded secrets, missing RLS policies, insecure auth patterns, payment vulnerabilities, and other security anti-patterns.

What Vibe Security Does

Vibe Security is an agent skill that scans codebases for security vulnerability patterns common in AI-generated code. It uses technology-specific reference files to audit only relevant parts of your stack (Supabase, Stripe, React Native, etc.), catching issues like:

  • Hardcoded API keys and secrets
  • Disabled or missing Row-Level Security (RLS) policies
  • Insecure authentication patterns
  • Client-submitted payment amounts
  • Missing rate limiting
  • Tokens stored in localStorage
  • Exposed secrets in mobile bundles
  • AI API keys without usage caps