Now liveThe Skillselion MCP - thousands of ranked skills, loaded into your agent mid-task. No install.Get it →

raroque/vibe-security-skill

1 skill · 2.5k installs · 912 stars · GitHub

Install

npx skills add https://github.com/raroque/vibe-security-skill

Skills in this repo

1Vibe SecurityThe vibe-security skill audits codebases for security vulnerabilities commonly introduced when AI assistants generate applications quickly without security fundamentals. The core principle is never trust the client: prices, user IDs, roles, subscription status, feature flags, and rate limits must be validated server-side. The audit process walks nine areas loading reference files only when relevant: secrets and environment variables, database access control including Supabase RLS and Firebase rules, authentication and authorization, rate limiting, payment security, mobile security, AI and LLM integration risks, deployment configuration, and data access with input validation. Findings are organized by severity from Critical to Low with file references, vulnerability names, attacker impact, and before-after fixes. Critical issues like exposed service_role keys or disabled RLS are flagged immediately at the top. When generating new code, relevant reference files are consulted proactively to prevent introducing vulnerabilities before they ship.2.5kinstalls

Five minutes, every Monday - the tools, releases and tactics for developers.

unsubscribe anytime.

raroque/vibe-security-skill · 1 skills · Skillselion