Skip to content

Skillselionwith God's help

By phase

IdeaResearch & spot demand
ValidateScope & prototype
BuildFrontend, backend, MCP
ShipTest, review, deploy
LaunchDistribution, SEO, ASO
GrowAnalytics & retention
OperateMonitoring & uptime

By type

Skills
Marketplaces
MCP servers
Workflows

Skills Marketplaces MCP Learn Brief

Browse all tools →By phase

Idea Validate Build Ship Launch Grow Operate

Explore

Skills
Marketplaces
MCP
Learn
Brief

This week for builders

Five minutes, every Monday — the tools, releases and tactics for shipping solo.

Email address

unsubscribe anytime.

Skillselion

An independent, curated directory of AI-coding tools for solo builders - skills, MCP servers, marketplaces and workflows for Claude Code, Codex and Cursor, organized by the indie build journey from idea to operate.

ResourcesBrowse Skills Browse MCP Servers Browse Marketplaces Browse Workflows Best-of shortlists Glossary State of AI Skills 2026 Weekly Brief

CommunityAbout Learn Feedback Privacy Policy Terms Cookie Policy Accessibility Cookie settings

Last updated June 10, 2026 · © 2026 Skillselion. Skillselion is an independent project and is not affiliated with Anthropic, OpenAI, Cursor, Claude, Claude Code, or Codex.

Skills/RAROQUE/VIBE SECURITY SKILL

raroque/vibe-security-skill

1 skill · 1.7k installs · 744 stars · GitHub

Install

npx skills add https://github.com/raroque/vibe-security-skill

Skills in this repo

1Vibe SecurityVibe Security is an agent skill that audits fast-prototyped and AI-integrated applications for mistakes that are common when solo builders ship quickly. It focuses on LLM integration safety: keeping provider keys off the client, enforcing spend and per-user caps, and avoiding prompt-injection footguns in TypeScript-style examples. The skill is framed for implicit invocation when you ask the agent to review your project, and it complements generic scanners by naming the anti-patterns indie AI apps actually ship. Run it while you are still in active build on integrations and again at Ship before exposing billing or production traffic. It does not replace formal penetration testing or compliance programs, but it gives a concrete checklist aligned with how Claude, OpenAI, and similar APIs are wired in modern stacks.1.7kinstalls