Show HN: Vibecheck – a pre-launch security audit for AI-built apps

Category: security

Tags: security-audit, ai-generated-code, static-analysis, zero-dependency, claude-code-plugin

Score: 6.3/10 (Innovation: 6, Technical: 5, Documentation: 8, Utility: 6)

vibecheck is a pre-launch security audit tool for AI-generated apps, implemented as a zero-dependency scanner combined with AI agent skills. It detects common vulnerabilities like exposed secrets, missing Supabase RLS, and IDOR, and provides fix prompts and a guard hook to prevent secret leaks. While not a novel security paradigm, it addresses a timely gap with strong documentation and practical integrations.

Target audience: vibe coders, indie developers, backend developers

Repository: https://github.com/ribato22/vibecheck · JavaScript · MIT

View on Hacker News