Audit codebases for security vulnerabilities with prioritized fixes.
npx skills add https://github.com/Seva-Eats/seva-web --skill vibe-security-seva-eats
Please help me install this Agent Skill. Skill: vibe-security Source: https://github.com/Seva-Eats/seva-web/tree/main/.agents/skills/vibe-security Command: npx skills add https://github.com/Seva-Eats/seva-web --skill vibe-security-seva-eats
This Skill helps you audit a codebase for security issues that AI-generated and rapidly built applications often miss, including exposed secrets, broken authorization, insecure payments, and unsafe trust in client-side data.
Ask the skill to audit the repository for security vulnerabilities and prioritize the most exploitable findings with clear remediation steps.
High-intent search queries and answers about installing and using this skill.
To audit a Supabase codebase for security vulnerabilities, systematically inspect repository files for exposed secrets, broken authentication, and missing RLS database access controls. This process prioritizes exploitable findings and provides concrete before-and-after fixes for each issue.
Rapidly built web applications most commonly miss exposed secrets, unsafe client-side environment variables, broken authorization bypasses in middleware, and client-controlled pricing in payment flows. These security flaws stem from unsafe trust in client-side data and missing server-side validation.
Yes, this security audit evaluates Next.js server actions and route handlers. It systematically inspects authentication flows, middleware, and database permissions within these components to identify missing access control checks and exploitable authorization bypasses.
To check payment integrations for client-controlled pricing and webhook validation, audit the codebase for weak webhook validation signatures, missing rate limits, and client-side price manipulation. This identifies fraud risks and prevents unexpected cost spikes.
Yes, you can scan mobile app bundles for exposed environment variables and insecure deployment settings. The security audit inspects mobile project repositories to detect hardcoded credentials, leaked keys, and unsafe trust in client-side data before production launch.
EntroVyxAnalyze client-side JavaScript bundles to map API routes and authentication assumptions.
Scheune10-codingScan Next.js, Supabase, and Stripe SaaS apps for security gaps.
eleva-labsPlan security audits with checklists for dependency scanning and secret detection.
dreadnodeFilter low-quality and false positive vulnerability findings from scanners and agent output.
