Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →aiskillstore/vibe-security
Security intelligence for code analysis. Detects SQL injection, XSS, CSRF, authentication issues, crypto failures, and more. Actions: scan, analyze, fix, audit, check, review, secure, validate, sanitize, protect. Languages: JavaScript, TypeScript, Python, PHP, Java, Go, Ruby. Frameworks: Express, Django, Flask, Laravel, Spring, Rails. Vulnerabilities: SQL injection, XSS, CSRF, authentication bypass, authorization issues, command injection, path traversal, insecure deserialization, weak crypto, s
Passed 10 of 18 test cases with the skill, and 6 of 18 without it.
and 3 more in the full report
6 fixed6 passed either way9 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 6 test cases the skill fixed. Same model, same prompt, with and without the skill.
Track untrusted variable propagation from source to sink in `app.py` using the dedicated analysis script.
| Checked | Without skill | With skill |
|---|---|---|
| invokes python3 .claude/skills/vibe-security/scripts/dataflow_analyzer.py app.py | Missed | Passed |
The instructions your model reads when the skill loads.
Comprehensive security scanner and code analyzer for identifying vulnerabilities across multiple languages and frameworks.
Check if Node.js is installed:
node --version
If Node.js is not installed, install it based on user's OS:
macOS:
brew install node
Ubuntu/Debian:
sudo apt update && sudo apt install nodejs npm
Windows:
winget install OpenJS.NodeJS
We recommend using these AI models with Vibe Security for optimal security vulnerability detection and code fixing:
test cases passed, vs 6 / 18 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.