VibeSec-Skill

Why we included this project

VibeSec-Skill is a set of instructions you install into Claude Code, Cursor, Codex, Copilot, or similar coding assistants so the model checks its own work for security problems as it writes. The author packed years of bug bounty experience into the skill, which steers the assistant away from common mistakes like hardcoded API keys, missing authentication, weak passwords, IDOR, XSS, SSRF, and SQL injection. It also includes framework and cloud specific guidance for React, Node, Python, Java, and the major cloud providers. This is not a scanner or a runtime tool; it works at the prompt level, changing how the coding model approaches security before code ships. If your team relies on AI-assisted development and wants a low-effort way to add a security mindset without standing up new infrastructure, this is worth a look.