Audit codebases for security vulnerabilities in authentication, payments, and secrets.
npx skills add https://github.com/kartikkabadi/skills --skill vibe-security-kartikkabadi
Please help me install this Agent Skill. Skill: vibe-security Source: https://github.com/kartikkabadi/skills/tree/main/vibe-security Command: npx skills add https://github.com/kartikkabadi/skills --skill vibe-security-kartikkabadi
This Skill helps you find security vulnerabilities that are easy to miss in AI-generated or rapidly built applications, especially when authentication, payments, database access, or secrets are involved.
Audit this codebase for security issues and prioritize any critical vulnerabilities first.
High-intent search queries and answers about installing and using this skill.
Auditing a codebase for security vulnerabilities involves inspecting authentication, payment handling, secrets, and database access control to detect exposed credentials and enforce server-side validation. This Skill reviews critical application flows to identify exploit paths and client-side trust issues before deployment.
Common security issues in AI-generated applications include hardcoded credentials, unsafe client-side environment variables, authentication bypasses, and inadequate access-control enforcement. Rapidly built applications often trust client-side data for pricing and user roles instead of enforcing server-side checks.
Checking database access control rules requires auditing server-side authorization boundaries like Supabase RLS, Firebase rules, and Convex auth guards. This Skill evaluates these configurations to confirm sensitive data and user roles are protected against unauthorized access and exploit paths.
Yes, this security review supports Supabase RLS, Firebase rules, and Convex auth guards. It audits these specific access-control implementations alongside authentication flows, deployment configurations, and AI integrations to ensure proper server-side authorization and input validation.
Ensuring prices and user roles are enforced on the server requires verifying that subscription checks, payment handling, and sensitive data processing reject client-side trust. This Skill reviews code to confirm critical application state is validated and authorized server-side.
The best way to review input validation and rate limiting is to audit critical flows for missing server-side checks and potential bypasses. This Skill inspects these mechanisms alongside secrets and deployment configuration to prevent unauthorized access and data exposure.
ResearchMonkeyAudit authentication, authorization, secrets hygiene, and risk classification in code changes.
aaioneIdentify and remediate security vulnerabilities across authentication, input handling, and API endpoints.
uukuguyDetect code issues across security, quality, performance, and maintainability dimensions.
SnailSploitTest GraphQL APIs for introspection abuse, injection, and authorization bypasses.
