Vibe Security Skill

If you're shipping code written with AI assistance, this catches the security mistakes that vibe coding tends to introduce. It scans for the usual suspects: hardcoded API keys, missing Supabase RLS policies, client-submitted payment amounts, tokens in localStorage, and auth patterns that skip verification. The skill is tech-aware, so it only audits the parts of your stack that matter (Supabase, Stripe, React Native). Honestly, this is the kind of thing you should run before any PR that touches auth, payments, or database queries. It won't catch everything, but it will catch the obvious footguns that AI assistants love to generate when they're optimizing for "just make it work."

Install to Claude Code

npx -y skills add aradotso/security-skills --skill vibe-security-skill --agent claude-code