vibeforge1111

Vibeship Scanner — Security skill for Claude Code

Security community

a free vulnerability and security scanner for vibe coders, with 2000+ rulesets, and copy pasteable Master AI Fix Prompt to fix vulnerabilities.

How to install Vibeship Scanner

This entry records only its repository, not the path inside it, so there is no exact command to give. Open vibeforge1111/vibeship-scanner and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Vibeship Scanner does

a free vulnerability and security scanner for vibe coders, with 2000+ rulesets, and copy pasteable Master AI Fix Prompt to fix vulnerabilities.

Alternatives in Security

Free Code — The free build of Claude Code 8.1k ★
Skills — Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows 4k ★
Promptmap — Security scanner for custom LLM apps 1.2k ★

README

Vibeship Scanner

A security scanning tool designed for vibe coders. Analyzes GitHub repositories for vulnerabilities and generates AI-ready fix prompts.

Try It Free

**[scanner.vibeship.co](https://scanner.vibeship.co)** — Paste any public GitHub repo URL and get a full security scan in minutes. No signup required.

MCP Integration (Claude, Cursor, AI Assistants)

Use Vibeship Scanner directly from Claude or any MCP-compatible AI assistant.

Quick Setup

Add to your Claude Desktop config:

{
  "mcpServers": {
    "vibeship-scanner": {
      "command": "npx",
      "args": ["mcp-remote", "https://scanner.vibeship.co/mcp"]
    }
  }
}

What You Can Do

Command	What happens
"Scan https://github.com/org/repo"	Runs 16 security scanners on the repo
"Fix these security issues"	Creates a task list and fixes all issues systematically
"This is a false positive"	Reports FP with ultra-privacy (no code sent)
"What is CVE-2021-44228?"	Looks up vulnerability details

Example Session

You: Scan my repo https://github.com/myorg/myapp

Claude: 🎯 SCAN COMPLETE
        📊 Score: 45/100 (Grade F)
        🔴 Critical: 5  |  🟠 High: 18

        Ready to fix? Say "Yes, fix these issues"

You: Yes, fix these issues

Claude: [Creates TodoWrite task list with all 23 issues]
        Working through fixes one by one...
        ✅ Fix #1 complete - SQL injection in api/users.js
        ✅ Fix #2 complete - Hardcoded secret in config.ts
        ...

**Full documentation**: [MCP_USAGE.md](MCP_USAGE.md)

How AI Fix Prompts Work

Vibe coding with AI assistants is great for building fast, but security vulnerabilities can slip through. Vibeship Scanner bridges that gap:

Scan your repo — The scanner runs Opengrep (SAST), Trivy (dependencies), Gitleaks (secrets), and npm audit against your codebase
Get findings in plain English — No security jargon, just clear explanations of wha