Information Security For Vibecoded Apps

Vibesec Auditor: Autonomous AI Security Agent 🛡️

[](https://opensource.org/licenses/MIT) []() []()

An autonomous **Application Security (AppSec) prompt and skill module** for AI coding assistants (Google Antigravity, Cursor, Copilot, Claude, Windsurf). Converts AI-generated apps into secure production software.

---

⭐️ Support the Project

**If this skill helps you secure your application, please consider leaving a Star on this repository!** It takes one click, helps other builders find this tool, and is incredibly appreciated.

---

🛡️ Built for Vibe Coders

AI tools are fantastic at writing code that works, but they consistently ignore secure architecture. This project exists to close that loop. This engine was built to solve that exact issue. It brings rigorous, enterprise-grade security engineering directly into your rapid AI workflow.

Created by a **Certified Information Systems Auditor (CISA, ISACA, USA)** with over 15 years of hands-on experience in enterprise Application Security, threat modeling, and DevSecOps.

📋 Anchored in Global Infosec Standards

The 12-Phase Autonomous Scan strictly enforces the most widely respected cybersecurity frameworks in the industry. The agent's logic is explicitly mapped to:

• OWASP Top 10 (2021): Comprehensive coverage against the most critical web application security risks (Injection, Broken Access Control, Cryptographic Failures).
• OWASP ASVS (Application Security Verification Standard): Automated checks aligned with Level 1 and Level 2 verification requirements for production readiness.
• NIST SSDF (Secure Software Development Framework): Enforces secure-by-design principles natively within your AI-assisted CI/CD pipeline.
• MITRE ATT&CK®: Proactive defense against known adversary tactic