securevibes
Autonomous security scanning, threat modeling, and vulnerability validation
All Skills in This Repository (2)
Pure Emerald Level Indicatorsinjection-testing
Validate input-based injection vulnerabilities using crafted payloads and observed responses.
authorization-testing
Test web application authorization flaws and classify results as VALIDATED, FALSE_POSITIVE, or UNVALIDATED.
Frequently Asked Questions
FAQPage SchemaHow to install SecureVibes?▼
Run `npx skills add anshumanbh/securevibes --all -g -y` in your terminal to install all skills in this suite globally.
What vulnerabilities can SecureVibes find?▼
It detects SQL injection, XSS, SSRF, command injection, XXE, NoSQL injection, authorization flaws like IDOR, and agentic AI risks mapped to OWASP ASI categories.
How does SecureVibes scan a codebase?▼
It runs coordinated stages: an assessment maps your architecture, threat modeling applies STRIDE analysis, code review finds vulnerabilities, and an optional DAST stage validates them against a running app.
Can SecureVibes review pull requests?▼
Yes. The pr-review command compares diffs against existing scan artifacts to flag new vulnerabilities introduced by a branch, commit range, or patch file.
Which programming languages does SecureVibes support?▼
It supports 11 languages including Python, JavaScript, TypeScript, Go, Ruby, Java, PHP, C#, Rust, Kotlin, and Swift, with automatic language detection.
Related Repositories in Software Engineering
View All in Software Engineering→openclaw
Run a personal AI assistant across your devices and chat apps
superpowers
Gives coding agents a disciplined workflow from idea to merged code
react
AI agent skills for building, testing, and porting React core