Ross ROSS = Recommend OSS · open-source software intelligence for agents

raroque/vibe-security-skill

Some data may be outdated — see provenance labels.

Agent skill that audits vibe-coded apps for common security vulnerabilities introduced by AI coding assistants observed · 2026-09-26

github.com/raroque/vibe-security-skill · MIT (permissive) observed · 2026-09-26

Health v2 · maintenance only

44/100

  • Activity 64
  • Release rhythm 35
  • Longevity 15

Flags: no_releases

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 219
  • days_rel: n/a
  • days_push: 219
  • n_releases_24m: 0

Full methodology

Adoption not part of the score

1028 stars · 125 forks observed · 2026-09-26

What it is AI-extracted, prompt v1, taxonomy v1, 2026-09-07, confidence 0.9

An agent skill in the Agent Skills format that audits applications for common security vulnerability patterns introduced by AI coding assistants, such as hardcoded secrets, missing row-level security, and trusting client-submitted data. It works with Claude Code, OpenAI Codex, and other compatible agents, loading technology-specific security rules based on the project's stack.

Use cases

  • audit my vibe-coded app for security issues
  • check my code for hardcoded secrets before shipping
  • find missing row-level security policies in my Supabase project
  • detect insecure Stripe payment flows
  • find secrets leaked into my React Native JS bundle
  • catch common AI-generated security vulnerabilities

When to choose

  • you build apps quickly with AI coding assistants and want automated security review
  • you use Claude Code or OpenAI Codex and want security rules loaded contextually by tech stack
  • you want to catch common patterns like exposed API keys or insecure token storage before deployment

When to avoid

  • you need comprehensive enterprise security scanning with SAST/DAST tooling
  • your project does not use an agent platform compatible with the Agent Skills format
  • you need continuous security monitoring rather than on-demand audits

Facets

plugin · maturity active

security vulnerability-scanning code-review developer-tools security developer-tools web-development artificial-intelligence cli cross-platform agent-skill ai-coding-assistants vibe-coding claude-code openai-codex security-audit appsec

1 source

Member repositories

RepositoryRoleHealth v2
raroque/vibe-security-skillmain44

For agents

markdown · JSON · MCP: product_card(name="raroque/vibe-security-skill")

Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem