Audits coding applications for security, performance, and quality weaknesses.
npx skills add https://github.com/BadTechBandit/skills --skill vibe-audit-badtechbandit
Please help me install this Agent Skill. Skill: vibe-audit Source: https://github.com/BadTechBandit/skills/tree/main/vibe-audit Command: npx skills add https://github.com/BadTechBandit/skills --skill vibe-audit-badtechbandit
Vibe-audit helps you prevent insecure, slow, or fragile code from reaching production by systematically checking common vulnerabilities and best-practice failures across your app.
Use it when you need a prioritized punch list for a pre-launch review, an audit of an app you didn’t build, or a structured way to hand remediation tasks back to a coding agent.
Ask your agent to run “vibe audit my app” and return the generated report folder so you can implement the highest-priority fix files first.
High-intent search queries and answers about installing and using this skill.
To run a security and code quality audit, you can prompt your agent to execute a vibe audit on your app. The tool detects your app stack from configuration files and runs 34 targeted checks across security, performance, and code quality categories.
Stack-aware reconnaissance detects your frameworks, databases, auth, and TypeScript setup from config files. This ensures only relevant checks run during a code audit, skipping non-applicable items with defined reasons to avoid false positives.
To generate a prioritized report for a pre-launch review, run an audit that produces a deterministic report folder. This folder contains a summary scorecard and dedicated implementation plans for each failing check.
Yes, you can use this audit for an app you didn't build. It provides a structured punch list of security, performance, and code quality weaknesses, making it easy to hand remediation tasks back to a coding agent.
Yes, the audit supports parallelizable category execution when available. It runs checks across security, database and performance, infrastructure and ops, and code quality categories simultaneously to speed up the review process.
To fix security gaps found during an audit, use the generated report folder. It contains self-contained fix instructions formatted per failing check, providing agent-ready remediation plans for issues like missing rate limiting or weak secrets.
drvossDetect a repository's technology stack and map it to Copilot skills and rules.
Hypership-SoftwareApply user-approved fixes from .vibe-check assessments sequentially.
Objective-ArtsReview source code with OpenAI Codex and apply targeted fixes.
eliottbusinessAutomate pre-commit code review with static analysis and security scanning.
