Vibe Security Skill
If you're shipping code written with AI assistance, this catches the security mistakes that vibe coding tends to introduce. It scans for the usual suspects: hardcoded API keys, missing Supabase RLS policies, client-submitted payment amounts, tokens in localStorage, and auth patterns that skip verification. The skill is tech-aware, so it only audits the parts of your stack that matter (Supabase, Stripe, React Native). Honestly, this is the kind of thing you should run before any PR that touches auth, payments, or database queries. It won't catch everything, but it will catch the obvious footguns that AI assistants love to generate when they're optimizing for "just make it work."
- skills.sh installs
- 976
- GitHub stars
- 6
- last updated
- Jul 14, 2026
Install
$ npx -y skills add aradotso/security-skills --skill vibe-security-skill --agent claude-codeInstalls into .claude/skills of the current project.
Files
Vibe Security Skill
Skill by ara.so — Security Skills collection.
This skill provides expertise in using the Vibe Security tool to audit vibe-coded applications for common security vulnerabilities that AI coding assistants frequently introduce. It helps identify hardcoded secrets, missing RLS policies, insecure auth patterns, payment vulnerabilities, and other security anti-patterns.
What Vibe Security Does
Vibe Security is an agent skill that scans codebases for security vulnerability patterns common in AI-generated code. It uses technology-specific reference files to audit only relevant parts of your stack (Supabase, Stripe, React Native, etc.), catching issues like:
- Hardcoded API keys and secrets
- Disabled or missing Row-Level Security (RLS) policies
- Insecure authentication patterns
- Client-submitted payment amounts
- Missing rate limiting
- Tokens stored in localStorage
- Exposed secrets in mobile bundles
- AI API keys without usage caps
Installation
For Claude Code
npx skills add https://github.com/raroque/vibe-security-skill --skill vibe-security
For OpenAI Codex
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/aradotso/security-skills
- Category
- Security
- First seen
- Jul 14, 2026
More from aradotso/security-skills
All 58- Openclaw Security Hardening971
- Malware Detection Awareness960
- Slowmist Agent Security Framework955
- Autopentestx Automated Pentesting950
- Avast Premium Security Analysis947
- Malware Warning Avast Keygen945
- Palisade Security Nexus Bitdefender937
- Malware Warning Avast Piracy934
- Avast Security Awareness933
- Report Malicious Repository927
- Unisecurityguard Academic Whistleblower Archive925
- Wxmini Security Audit919
- Avast Premium Security Detection918
- Security Awareness Malicious Repository Detection909
- Avast Premium Security Malware Analysis905
- Avast Premium Security Awareness898
- Avast Security Analysis897
- Openclaw Security Watchdog856
- Security Threat Awareness852
- Malware Analysis DragonflyTomb Avast851
- Avast Premium Security Malware Detection837
- Mcp Security Hub827
- Identify Malicious Repository823
- Bitdefender Total Security Malware Analysis817
Recommended
More Security
avast-premium-security-analysisaradotso/security-skillsavast premium security analysis947skills.sh installsavast-premium-security-detectionaradotso/security-skillsavast premium security detection918skills.sh installssecurity-awareness-malicious-repository-detectionaradotso/security-skillssecurity awareness malicious repository detection909skills.sh installsavast-premium-security-malware-analysisaradotso/security-skillsavast premium security malware analysis905skills.sh installsavast-premium-security-awarenessaradotso/security-skillsavast premium security awareness898skills.sh installs