vibeguard
vibeguard v2.0.1
Security auditor and hardener for vibe-coded projects. 170+ vulnerability checks across 24 categories including injection, XSS, auth bypass, IDOR, Supabase RLS, prompt injection, exposed secrets, r...
From the developer
License
MIT
Declared components
Skills
Works with
Claude Code
Description
From the marketplace listing
Security auditor and hardener for vibe-coded projects. 170+ vulnerability checks across 24 categories including injection, XSS, auth bypass, IDOR, Supabase RLS, prompt injection, exposed secrets, rate limiting, CORS, and auth provider misconfigs. Three commands: /vibeguard:audit (scan and report), /vibeguard:fix (patch findings), /vibeguard:harden (add security infrastructure). Includes a pre-commit hook that blocks git commits containing hardcoded secrets.
What changed
No changes recorded yet. Follow this plugin to keep track of future changes.
Similar plugins
Find competitors to follow as you develop your plugin.
-
Skill Safety Auditor is a Claude Code skill that audits third-party skills for security risks before or after you install them. It runs 1...
Shared terms: auditor, injection, check, security
-
Comprehensive security scanner for codebases. Scans for hardcoded secrets (30+ API key formats), injection flaws (SQLi, XSS, command inje...
Shared terms: injection, xss, security, cors
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit review...
Shared terms: injection, vulnerability, xss, security
-
An automated auditor that finds hidden edge cases in your code before they reach your users. It checks your project against 12 specific f...
Shared terms: auditor, categorie, check, project
-
Expert Supabase guidance for RLS policies, Auth flows, Storage setup, security auditing, and best practices. Helps build secure, performa...
Shared terms: auth, rls, supabase, security
Keywords
Files & skills
vibeguard · catalog manifest
Saved declaration
{}
vibeguard · catalog manifest
Saved declaration
{
"name": "vibeguard",
"source": {
"sha": "c960454d3ebbe7403e33568cac7a044cf2f08fa3",
"url": "https://github.com/geraldang702/vibeguard.git",
"source": "url"
},
"homepage": "https://github.com/geraldang702/vibeguard",
"description": "Security auditor and hardener for vibe-coded projects. 170+ vulnerability checks across 24 categories including injection, XSS, auth bypass, IDOR, Supabase RLS, prompt injection, exposed secrets, rate limiting, CORS, and auth provider misconfigs. Three commands: /vibeguard:audit (scan and report), /vibeguard:fix (patch findings), /vibeguard:harden (add security infrastructure). Includes a pre-commit hook that blocks git commits containing hardcoded secrets."
}
vibeguard · catalog manifest
Skills
"./skills/"
Saved declaration
{
"name": "vibeguard",
"author": {
"name": "vibeguard"
},
"skills": "./skills/",
"license": "MIT",
"version": "2.0.1",
"homepage": "https://github.com/geraldang702/vibeguard",
"keywords": [
"security",
"audit",
"vulnerability",
"xss",
"injection",
"supabase",
"rls",
"hardening",
"vibe-coding",
"secrets"
],
"repository": "https://github.com/geraldang702/vibeguard",
"description": "Security auditor and hardener for vibe-coded projects. 170+ vulnerability checks across 24 categories including injection, XSS, auth bypass, IDOR, Supabase RLS, prompt injection, exposed secrets, rate limiting, CORS, auth provider misconfigs (NextAuth, Clerk, Auth.js), and vibe-coding antipatterns."
}
plugin.json observed Nov 6, 2026 · 10:50 UTC. Manifest source ↗
Catalog declarations and available plugin.json metadata are saved. Referenced skills and executable source files are not downloaded or tested. Missing components in a manifest do not prove that the plugin has none.
Installation instructions
Community
/plugin marketplace add anthropics/claude-plugins-community
/plugin install vibeguard@claude-community
Technical details
- Sources
- Community
- First seen
- Oct 3, 2026 · 22:13 UTC
- Last seen
- Nov 7, 2026 · 00:08 UTC
- Latest observed change
- Oct 3, 2026 · 22:13 UTC
- Collection status
- Listed
- Reported installs
- Not provided
Installation counts are source-reported, not independently verified active users. Observation dates are not release dates.
Download plugin data (JSON)Plugin history: freshly prepared. Prepared . Refreshed when catalog data changes or after 6 hours. Your account and Follow status are live.