#322322nd of 324 in Skills, plugins and prompts
vibesec-skill
Security skill that steers AI coding agents away from common web vulnerabilities
- Stars
- 1.4k
- License
- Apache-2.0
- Last commit
- Feb 2026
734 on 3 Apr 20261,379 on 30 Oct 2026
From GitHub's daily star counts.
Checked on GitHub.
Overview
A skill folder for coding agents that steers generated code away from common web vulnerabilities. It covers access control, client-side, server-side, authentication and API issues such as IDOR, XSS, SSRF, SQL injection and JWT handling, with checklists per class. Install by cloning the repo into the skills directory of Claude Code, Cursor, Codex, GitHub Copilot or Antigravity.
Who it is for: Developers vibe coding web apps who want secure defaults from their agent
Strengths
- Installs by cloning into a skills directory; no runtime or services needed
- Documents install paths for five agents: Claude Code, Cursor, Codex, Copilot, Antigravity
- Names specific classes: IDOR, XSS, CSRF, SSRF, SQLi, XXE, path traversal, JWT, GraphQL
- Includes framework notes (React, Vue, Node.js, Python, Java, .NET) and cloud metadata guidance
Weaknesses
- README says it covers only 60-70% of common vulnerabilities
- Fuller coverage is offered through a separate product at vibesec.sh
- Guides code generation only; does not scan or test existing code
- No releases published; last commit 2026-02-17
What it needs
- no GPU
- Needs Claude Code, Cursor, Codex, GitHub Copilot or Antigravity
- Models: Any model used through a supported agent
Quick answers
Is vibesec-skill open source?
Yes. Its code is on GitHub under the Apache-2.0 license.
Also in Skills, plugins and prompts
See all 324| Rank | Project | Score |
|---|---|---|
| 1 | impeccableDesign skill with 24 slash commands for AI coding agents' frontend output | 96 out of 100 |
| 2 | skillsAgent skills for planning, TDD, debugging and code review | 95 out of 100 |
| 3 | eccAgents, skills, hooks and rules bundle for Claude Code, Codex and other harnesses | 95 out of 100 |
| #4 | gstackMarkdown slash-command skills that give Claude Code planning, review, QA and ship roles | 95 out of 100 |
| #5 | cavemanCuts token use in coding agents with terse replies and compressed inputs | 95 out of 100 |