{"id":4894,"external_id":"plugins_6ab01c9056c481918eac972df8fb396d","name":"vibe-code-security-reviewer","display_name":"Vibe Code Security Reviewer","developer":"The Doers Firm","category":"Security","listing_language":"en","listing_language_details":{"method":"cld-0.13.0/listing-v1","reliable":true,"detected_at":"2026-10-01T13:22:05Z","input_sha256":"9c0dc5de11e1571ff23e9eaa632dd9a7d4e024aebdbf987eea5154da39d83450","source_fields":["release.description","release.interface.short_description","release.interface.long_description"]},"version":"0.1.0","skill_count":20,"first_seen_at":"2026-09-30T22:02:35.000Z","last_seen_at":"2026-10-01T12:00:01.032Z","last_changed_at":"2026-09-30T22:02:35.000Z","install_count":null,"research_summary":null,"research_reviewed_at":null,"metadata":{"id":"plugins_6ab01c9056c481918eac972df8fb396d","name":"vibe-code-security-reviewer","scope":"GLOBAL","status":"ENABLED","release":{"id":"pluginrel_641909d86fdc819191ea7aef2ee00477","skills":[{"name":"ai-application-security","interface":{"brand_color":null,"iconography":"code","display_name":"ai-application-security","default_prompt":null,"icon_large_url":null,"icon_small_url":null,"short_description":"Review AI features for prompt injection, data leakage, tool abuse, unsafe output, and excessive agency."},"description":"Review AI features for prompt injection, data leakage, tool abuse, unsafe output, and excessive agency.","plugin_release_skill_id":"pluginrsk_6ab01c999a048191b4b4b1524dc96976"},{"name":"api-abuse-and-misuse","interface":{"brand_color":null,"iconography":"code","display_name":"api-abuse-and-misuse","default_prompt":null,"icon_large_url":null,"icon_small_url":null,"short_description":"Review APIs for broken object authorization, excessive data, unsafe methods, rate-limit gaps, and abuse paths."},"description":"Review APIs for broken object authorization, excessive data, unsafe methods, rate-limit gaps, and abuse paths.","plugin_release_skill_id":"pluginrsk_6ab01c96c1488191971a388d9f98d683"},{"name":"api-leak-and-key-security","interface":{"brand_color":null,"iconography":"radar","display_name":"api-leak-and-key-security","default_prompt":null,"icon_large_url":null,"icon_small_url":null,"short_description":"Detect API keys, service credentials, tokens, and privileged endpoints leaked to clients or repositories."},"description":"Detect API keys, service credentials, tokens, and privileged endpoints leaked to clients or repositories.","plugin_release_skill_id":"pluginrsk_6ab01c96cab081919cdffbebbb8a7bcd"},{"name":"authentication-and-authorization","interface":{"brand_color":null,"iconography":"code","display_name":"authentication-and-authorization","default_prompt":null,"icon_large_url":null,"icon_small_url":null,"short_description":"Review login, sessions, tokens, roles, permissions, tenant isolation, and privileged actions."},"description":"Review login, sessions, tokens, roles, permissions, tenant isolation, and privileged actions.","plugin_release_skill_id":"pluginrsk_6ab01c947d148191a303510764134781"},{"name":"cloudflare-and-deployment-security","interface":{"brand_color":null,"iconography":"code","display_name":"cloudflare-and-deployment-security","default_prompt":null,"icon_large_url":null,"icon_small_url":null,"short_description":"Review Workers, Pages, storage bindings, deployment configuration, and production security controls."},"description":"Review Workers, Pages, storage bindings, deployment configuration, and production security controls.","plugin_release_skill_id":"pluginrsk_6ab01c9336a48191810326fbdac752ff"},{"name":"dependencies-and-supply-chain","interface":{"brand_color":null,"iconography":"code","display_name":"dependencies-and-supply-chain","default_prompt":null,"icon_large_url":null,"icon_small_url":null,"short_description":"Review packages, lockfiles, scripts, provenance, licensing, advisories, and dependency risk."},"description":"Review packages, lockfiles, scripts, provenance, licensing, advisories, and dependency risk.","plugin_release_skill_id":"pluginrsk_6ab01c9715f48191bc7cac9420f32835"},{"name":"edge-functions-and-webhooks","interface":{"brand_color":null,"iconography":"code","display_name":"edge-functions-and-webhooks","default_prompt":null,"icon_large_url":null,"icon_small_url":null,"short_description":"Review serverless functions, webhooks, signatures, retries, idempotency, and privileged execution."},"description":"Review serverless functions, webhooks, signatures, retries, idempotency, and privileged execution.","plugin_release_skill_id":"pluginrsk_6ab01c959b3081919a243e7a17d846e7"},{"name":"observability-and-incident-response","interface":{"brand_color":null,"iconography":"radar","display_name":"observability-and-incident-response","default_prompt":null,"icon_large_url":null,"icon_small_url":null,"short_description":"Review security logging, alerting, audit trails, containment, recovery, and post-incident evidence."},"description":"Review security logging, alerting, audit trails, containment, recovery, and post-incident evidence.","plugin_release_skill_id":"pluginrsk_6ab01c93148c81918de8df2d045ea8a6"},{"name":"postgres-database-security","interface":{"brand_color":null,"iconography":"code","display_name":"postgres-database-security","default_prompt":null,"icon_large_url":null,"icon_small_url":null,"short_description":"Review PostgreSQL schemas, grants, functions, views, migrations, and query safety."},"description":"Review PostgreSQL schemas, grants, functions, views, migrations, and query safety.","plugin_release_skill_id":"pluginrsk_6ab01c948fb48191a4254c41d7e8af1b"},{"name":"privacy-and-data-governance","interface":{"brand_color":null,"iconography":"radar","display_name":"privacy-and-data-governance","default_prompt":null,"icon_large_url":null,"icon_small_url":null,"short_description":"Review collection, minimization, retention, consent, logging, export, deletion, and third-party data flows."},"description":"Review collection, minimization, retention, consent, logging, export, deletion, and third-party data flows.","plugin_release_skill_id":"pluginrsk_6ab01c989cb08191a55242a06a7710f3"},{"name":"realtime-and-messaging-security","interface":{"brand_color":null,"iconography":"radar","display_name":"realtime-and-messaging-security","default_prompt":null,"icon_large_url":null,"icon_small_url":null,"short_description":"Review realtime channels, WebSockets, queues, broadcasts, subscriptions, and message authorization."},"description":"Review realtime channels, WebSockets, queues, broadcasts, subscriptions, and message authorization.","plugin_release_skill_id":"pluginrsk_6ab01c947b50819183d4054eee76faf5"},{"name":"secrets-and-data-protection","interface":{"brand_color":null,"iconography":"radar","display_name":"secrets-and-data-protection","default_prompt":null,"icon_large_url":null,"icon_small_url":null,"short_description":"Find exposed secrets and review sensitive-data collection, storage, logging, and transmission."},"description":"Find exposed secrets and review sensitive-data collection, storage, logging, and transmission.","plugin_release_skill_id":"pluginrsk_6ab01c95aa38819187a0ca0a28dd8e53"},{"name":"security-review-reporting","interface":{"brand_color":null,"iconography":"code","display_name":"security-review-reporting","default_prompt":null,"icon_large_url":null,"icon_small_url":null,"short_description":"Produce concise, evidence-backed security reports for developers and stakeholders."},"description":"Produce concise, evidence-backed security reports for developers and stakeholders.","plugin_release_skill_id":"pluginrsk_6ab01c9960948191ae76c6ea4f5970e5"},{"name":"security-testing-and-remediation","interface":{"brand_color":null,"iconography":"code","display_name":"security-testing-and-remediation","default_prompt":null,"icon_large_url":null,"icon_small_url":null,"short_description":"Convert findings into safe tests, prioritized fixes, regression coverage, and verification evidence."},"description":"Convert findings into safe tests, prioritized fixes, regression coverage, and verification evidence.","plugin_release_skill_id":"pluginrsk_6ab01c9358308191bc83fde6fd76fd43"},{"name":"storage-and-upload-security","interface":{"brand_color":null,"iconography":"radar","display_name":"storage-and-upload-security","default_prompt":null,"icon_large_url":null,"icon_small_url":null,"short_description":"Review object storage, file uploads, MIME validation, path ownership, malware risk, and download authorization."},"description":"Review object storage, file uploads, MIME validation, path ownership, malware risk, and download authorization.","plugin_release_skill_id":"pluginrsk_6ab01c95abe48191ae840c79289ebeab"},{"name":"supabase-auth-and-sessions","interface":{"brand_color":null,"iconography":"code","display_name":"supabase-auth-and-sessions","default_prompt":null,"icon_large_url":null,"icon_small_url":null,"short_description":"Review Supabase Auth identity, JWT claims, sessions, recovery, OAuth, and account lifecycle security."},"description":"Review Supabase Auth identity, JWT claims, sessions, recovery, OAuth, and account lifecycle security.","plugin_release_skill_id":"pluginrsk_6ab01c97afe4819182e606b254ec5113"},{"name":"supabase-rls-security","interface":{"brand_color":null,"iconography":"code","display_name":"supabase-rls-security","default_prompt":null,"icon_large_url":null,"icon_small_url":null,"short_description":"Perform deep Supabase Row Level Security, Data API exposure, policy, view, function, and role analysis."},"description":"Perform deep Supabase Row Level Security, Data API exposure, policy, view, function, and role analysis.","plugin_release_skill_id":"pluginrsk_6ab01c948178819195fa60268bef8da8"},{"name":"threat-modeling","interface":{"brand_color":null,"iconography":"radar","display_name":"threat-modeling","default_prompt":null,"icon_large_url":null,"icon_small_url":null,"short_description":"Model assets, actors, trust boundaries, attack paths, and mitigations for an application."},"description":"Model assets, actors, trust boundaries, attack paths, and mitigations for an application.","plugin_release_skill_id":"pluginrsk_6ab01c931f6081919c48daf27bd08a25"},{"name":"vibe-code-security-reviewer","interface":{"brand_color":null,"iconography":"radar","display_name":"vibe-code-security-reviewer","default_prompt":null,"icon_large_url":null,"icon_small_url":null,"short_description":"Route fast-built application reviews into focused threat, code, dependency, data, deployment, and remediation workflows."},"description":"Route fast-built application reviews into focused threat, code, dependency, data, deployment, and remediation workflows.","plugin_release_skill_id":"pluginrsk_6ab01c97ea108191aa05772d664df608"},{"name":"web-application-security","interface":{"brand_color":null,"iconography":"radar","display_name":"web-application-security","default_prompt":null,"icon_large_url":null,"icon_small_url":null,"short_description":"Review web applications for injection, XSS, CSRF, SSRF, unsafe redirects, uploads, and browser security weaknesses."},"description":"Review web applications for injection, XSS, CSRF, SSRF, unsafe redirects, uploads, and browser security weaknesses.","plugin_release_skill_id":"pluginrsk_6ab01c9593fc8191befd8c9cfe83d5ea"}],"app_ids":[],"version":"0.1.0","keywords":[],"interface":{"category":"Security","logo_url":"https://files.openai.com/content?id=file_0000000008188211a0fb55d7e8ec9e28","brand_color":null,"website_url":"https://thedoersfirm.com/","capabilities":["Analyze","Write"],"logo_url_dark":"https://files.openai.com/content?id=file_00000000a1348211856c0f7af76bda80","default_prompt":"Audit this app for the highest-risk vulnerabilities.","developer_name":"The Doers Firm","default_prompts":["Audit this app for the highest-risk vulnerabilities.","Review this authentication flow and find bypasses.","Check this AI-generated code before production."],"screenshot_urls":[],"long_description":"Vibe Code Security Reviewer performs advanced evidence-based security reviews of AI-generated and rapidly built applications. It checks Supabase RLS, authentication, authorization, tenant isolation, API leaks and misuse, inputs, secrets, uploads, dependencies, data exposure, AI tools, deployment configuration, and abuse paths, then prioritizes findings with practical remediation and verification steps.","composer_icon_url":"https://files.openai.com/content?id=file_000000009fb082088dcd704cccde92df","short_description":"Audit real security risks","plugin_category_id":"security","privacy_policy_url":"https://thedoersfirm.com/privacy","terms_of_service_url":"https://thedoersfirm.com/terms","composer_icon_dark_url":null},"description":"Advanced security review for AI-generated applications, Supabase RLS, APIs, secrets, databases, and production deployments.","app_manifest":null,"display_name":"Vibe Code Security Reviewer","app_templates":[],"onboarding_skill_name":null,"requires_local_executor":false},"created_at":"2026-09-20T17:54:23.523419Z","is_template":false,"connector_id":null,"discoverability":"UNLISTED","canonical_app_id":null},"research":null,"package_metadata":{"name":"vibe-code-security-reviewer","author":{"url":"https://thedoersfirm.com/","name":"The Doers Firm"},"sources":[{"path":".codex-plugin/plugin.json","sha256":"25d2ca1f178f6ec4a61e8f24250892fd3298a791c2de71741daaf1536fcbd545"}],"version":"0.1.0","homepage":"https://thedoersfirm.com/","repository":"https://thedoersfirm.com/gpts","artifact_id":5801,"observed_at":"2026-09-30T23:17:09Z","capabilities":["Analyze","Write"],"field_sources":{"name":0,"author":0,"version":0,"homepage":0,"repository":0,"capabilities":0},"extraction_version":1,"conflicts_or_errors":[]}}