VibeSec-Skill

VibeSec-Skill

**Stop vibe coding vulnerabilities into production.**

An AI skill that brings 5+ years of bug bounty hunting experience directly into your AI coding workflow - so LLM models write secure code from the start.

Introduction

Vibe coding is fun until your app ends up on social media for all the wrong reasons.

We have all seen the posts/memes:

• API keys hardcoded in JavaScript bundles
• IDOR vulnerabilities allowing user data dumps
• No authentication for sensitive pages
• Weak passwords for admin panels

Security gaps aren't obvious until someone exploits them. Without the right guidance, AI will confidently ship vulnerable patterns alongside your features.

VibeSec is an AI Skill that acts as a security-first co-pilot. It teaches your selected model to approach your code from a bug hunter's perspective, catching vulnerabilities before they ship.

📚 Table of Contents

• VibeSec-Skill
  • 📥 Installation
  • 🛡️ Covered Vulnerabilities
  • 🚀 Quick Start
  • 🤝 Contribution
  • 📬 Contact

[!Tip] This skill already covers 60-70% of the common vulnerabilities. However, if you need a more robust version with more vulnerability coverage, please visit [vibesec.sh](https://vibesec.sh/)

📥 Installation

• Claude Code

  • Clone this repository: `git clone https://github.com/BehiSecc/VibeSec-Skill`

  • Add it to `~/.claude/skills` (global) or `.claude/skills` in your project directory (project-only).

• Cursor

  • Clone this repository: `git clone https://github.com/BehiSecc/VibeSec-Skill`

  • Add it to `~/.cursor/skills` (global) or `.cursor/skills` in your project directory (project-only).

• Codex

  • Clone this repository: `git clone https://github.com/BehiSecc/VibeSec-Skill`

  • Add it to `~/.agents/skills` (global) or `.agents/skills` in your project directory (project-only).

• Github Copilot

...