Vibe Sec
Security gap finder for vibe-coded apps — the tier-aware security audit and orchestration layer. Defers to gitleaks/OSV-Scanner/Semgrep/Trivy when present, falls back to an in-house baseline when absent, and owns the tier classification (mapped to OWASP ASVS), severity calibration, four-band report, confidence-routed fixes with destructive-action overrides, and threat-model synthesis. /vibe-sec:audit runs the full twelve-concern audit (secrets, deps, supply-chain, config, crypto/PII, auth-model,
Works with: Claude Code, Cursor, Claude Desktop, Codex CLI, Gemini CLI, Cline, Windsurf, VS Code
Category: Security — see all ranked ›
- tashan score: 39.0
- Adoption: 1 repos
- Health: active
- GitHub stars: 0
Security audit
Not scanned yet. We audit npm-published capabilities for known advisories, install-time scripts and permission surface; this one has no npm package we can resolve, or has not reached the queue.
source ↗ · plugin:estevanhernandez-stack-ed/vibe-sec/vibe-sec
Already running this? npx tashan-cli doctor checks your whole config against the Index — how it works ›