Vibe Security Skill

Skill by ara.so — Security Skills collection.

This skill provides expertise in using the Vibe Security tool to audit vibe-coded applications for common security vulnerabilities that AI coding assistants frequently introduce. It helps identify hardcoded secrets, missing RLS policies, insecure auth patterns, payment vulnerabilities, and other security anti-patterns.

What Vibe Security Does

Vibe Security is an agent skill that scans codebases for security vulnerability patterns common in AI-generated code. It uses technology-specific reference files to audit only relevant parts of your stack (Supabase, Stripe, React Native, etc.), catching issues like:

• Hardcoded API keys and secrets
• Disabled or missing Row-Level Security (RLS) policies
• Insecure authentication patterns
• Client-submitted payment amounts
• Missing rate limiting
• Tokens stored in localStorage
• Exposed secrets in mobile bundles
• AI API keys without usage caps