softwareasg-tools

Information Security For Vibecoded Apps — Security skill for Claude Code

Security community

An autonomous Application Security (AppSec) prompt and skill module for AI coding assistants (Antigravity, Cursor, Copilot).

How to install Information Security For Vibecoded Apps

This entry records only its repository, not the path inside it, so there is no exact command to give. Open softwareasg-tools/information-security-for-vibecoded-apps and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Information Security For Vibecoded Apps does

An autonomous Application Security (AppSec) prompt and skill module for AI coding assistants (Antigravity, Cursor, Copilot). Converts vibe-coded apps into secure production software

Alternatives in Security

FastAPI Review — Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu 243.5k ★
Agent Skills Guard — 一款提供Agent Skills安全扫描和可视化管理的桌面应用 A desktop application that provides security scanning and visual management fo 389 ★
Claude Leaked Files — Mirrored snapshot of Claude Code's source (exposed 2026-03-31) preserved for educational purposes, defensive s 256 ★

README

Vibesec Auditor: Autonomous AI Security Agent 🛡️

[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT) [![AppSec](https://img.shields.io/badge/Security-AppSec-blue.svg)]() [![AI Prompt](https://img.shields.io/badge/AI-Agent_Prompt-purple.svg)]()

An autonomous **Application Security (AppSec) prompt and skill module** for AI coding assistants (Google Antigravity, Cursor, Copilot, Claude, Windsurf). Converts AI-generated apps into secure production software.

⭐️ Support the Project

**If this skill helps you secure your application, please consider leaving a Star on this repository!** It takes one click, helps other builders find this tool, and is incredibly appreciated.

🛡️ Built for Vibe Coders

AI tools are fantastic at writing code that works, but they consistently ignore secure architecture. This project exists to close that loop. This engine was built to solve that exact issue. It brings rigorous, enterprise-grade security engineering directly into your rapid AI workflow.

Created by a **Certified Information Systems Auditor (CISA, ISACA, USA)** with over 15 years of hands-on experience in enterprise Application Security, threat modeling, and DevSecOps.

📋 Anchored in Global Infosec Standards

The 12-Phase Autonomous Scan strictly enforces the most widely respected cybersecurity frameworks in the industry. The agent's logic is explicitly mapped to:

OWASP Top 10 (2021): Comprehensive coverage against the most critical web application security risks (Injection, Broken Access Control, Cryptographic Failures).
OWASP ASVS (Application Security Verification Standard): Automated checks aligned with Level 1 and Level 2 verification requirements for production readiness.
NIST SSDF (Secure Software Development Framework): Enforces secure-by-design principles natively within your AI-assisted CI/CD pipeline.
MITRE ATT&CK®: Proactive defense against known adversary tactic