Run a 30-point security audit on AI-built apps and produce a scored report with remediation guidance.
npx skills add https://github.com/namenroh/a-vibe-check --skill vibe-check-namenroh
Please help me install this Agent Skill. Skill: vibe-check Source: https://github.com/namenroh/a-vibe-check/tree/main Command: npx skills add https://github.com/namenroh/a-vibe-check --skill vibe-check-namenroh
AI-generated apps often ship with subtle security gaps and misconfigurations that break trust and complicate deployment. This Skill provides a structured, 30-point security audit to identify vulnerabilities, quantify risk with a score, and map findings to compliance frameworks.
Run the vibe-check skill on your project directory to generate a scorecard and remediation plan.
High-intent search queries and answers about installing and using this skill.
A security audit for AI-generated apps runs a 30-point check across your codebase to identify secrets, auth flaws, injections, and misconfigurations, generating a structured scorecard with prioritized remediation steps.
A code security scorecard includes a quantified risk score, prioritized remediation guidance, and mappings to compliance frameworks like OWASP, SOC2, PCI, and GDPR where applicable to your deployment context.
Yes, you can use this security audit for pre-shipment code reviews to check secrets, authorization, input handling, infrastructure, and data exposure to reveal common security gaps in AI-assisted development workflows.
Automated security scoring works by evaluating diverse codebases and deployment contexts against 30 points, quantifying risk to surface misconfigurations and compliance gaps in a structured report for AI-built apps.
Common security vulnerabilities in AI-built apps include exposed secrets, authentication weaknesses, injection flaws, infrastructure misconfigurations, and data exposure gaps across diverse codebases and deployment contexts.
lpjhelderAudit codebases for vulnerabilities, misconfigurations, and secrets.
KaakatiAudit application code, infrastructure, and processes against SOC2, HIPAA, PCI-DSS, and GDPR frameworks.
LuisSambranoPerform systematic code review and static analysis across multiple programming languages.
florianbuetowScan code and dependencies for vulnerabilities mapped to CWEs.
