Plugin

vibeguard

Security auditor and hardener for vibe-coded projects. 170+ vulnerability checks across 24 categories including injection, XSS, auth bypass, IDOR, Supabase RLS, prompt injection, exposed secrets, rate limiting, CORS, and auth provider misconfigs. Three commands: /vibeguard:audit (scan and report), /vibeguard:fix (patch findings), /vibeguard:harden (add security infrastructure). Includes a pre-commit hook that blocks git commits containing hardcoded secrets.

• Published source
• Repository

Analysed

11 October 2026

Last observed

11 October 2026

What the code does

• Runs hooks automatically Hooks that execute without being called explicitly.

Having a capability is not wrongdoing; many tools need these to do their job. It tells you what to check before you install.

This is public metadata, not a safety certification or complete assessment. Static analysis cannot establish what a tool does at runtime.