Use this plugin when you need a structured workflow rather than a one-off answer. Its capabilities are organized into focused skills so you can start broad, then go deeper where the work requires it.
ai application security
Review AI features for prompt injection, data leakage, tool abuse, unsafe output, and excessive agency.
What it helps with
Use Ai Application Security to turn a focused Vibe Code Security Reviewer task into a clearer, repeatable workflow.
Example use
Ask Vibe Code Security Reviewer to apply ai application security to a real project, document, or decision and explain the assumptions it used.
Prompt pattern
Use Ai Application Security for [specific goal]. Context: [relevant files, audience, inputs, or constraints]. Return: [desired format] and flag uncertainties.
api abuse and misuse
Review APIs for broken object authorization, excessive data, unsafe methods, rate-limit gaps, and abuse paths.
What it helps with
Use Api Abuse And Misuse to turn a focused Vibe Code Security Reviewer task into a clearer, repeatable workflow.
Example use
Ask Vibe Code Security Reviewer to apply api abuse and misuse to a real project, document, or decision and explain the assumptions it used.
Prompt pattern
Use Api Abuse And Misuse for [specific goal]. Context: [relevant files, audience, inputs, or constraints]. Return: [desired format] and flag uncertainties.
api leak and key security
Detect API keys, service credentials, tokens, and privileged endpoints leaked to clients or repositories.
What it helps with
Use Api Leak And Key Security to turn a focused Vibe Code Security Reviewer task into a clearer, repeatable workflow.
Example use
Ask Vibe Code Security Reviewer to apply api leak and key security to a real project, document, or decision and explain the assumptions it used.
Prompt pattern
Use Api Leak And Key Security for [specific goal]. Context: [relevant files, audience, inputs, or constraints]. Return: [desired format] and flag uncertainties.
authentication and authorization
Review login, sessions, tokens, roles, permissions, tenant isolation, and privileged actions.
What it helps with
Use Authentication And Authorization to turn a focused Vibe Code Security Reviewer task into a clearer, repeatable workflow.
Example use
Ask Vibe Code Security Reviewer to apply authentication and authorization to a real project, document, or decision and explain the assumptions it used.
Prompt pattern
Use Authentication And Authorization for [specific goal]. Context: [relevant files, audience, inputs, or constraints]. Return: [desired format] and flag uncertainties.
cloudflare and deployment security
Review Workers, Pages, storage bindings, deployment configuration, and production security controls.
What it helps with
Use Cloudflare And Deployment Security to turn a focused Vibe Code Security Reviewer task into a clearer, repeatable workflow.
Example use
Ask Vibe Code Security Reviewer to apply cloudflare and deployment security to a real project, document, or decision and explain the assumptions it used.
Prompt pattern
Use Cloudflare And Deployment Security for [specific goal]. Context: [relevant files, audience, inputs, or constraints]. Return: [desired format] and flag uncertainties.
dependencies and supply chain
Review packages, lockfiles, scripts, provenance, licensing, advisories, and dependency risk.
What it helps with
Use Dependencies And Supply Chain to turn a focused Vibe Code Security Reviewer task into a clearer, repeatable workflow.
Example use
Ask Vibe Code Security Reviewer to apply dependencies and supply chain to a real project, document, or decision and explain the assumptions it used.
Prompt pattern
Use Dependencies And Supply Chain for [specific goal]. Context: [relevant files, audience, inputs, or constraints]. Return: [desired format] and flag uncertainties.
edge functions and webhooks
Review serverless functions, webhooks, signatures, retries, idempotency, and privileged execution.
What it helps with
Use Edge Functions And Webhooks to turn a focused Vibe Code Security Reviewer task into a clearer, repeatable workflow.
Example use
Ask Vibe Code Security Reviewer to apply edge functions and webhooks to a real project, document, or decision and explain the assumptions it used.
Prompt pattern
Use Edge Functions And Webhooks for [specific goal]. Context: [relevant files, audience, inputs, or constraints]. Return: [desired format] and flag uncertainties.
observability and incident response
Review security logging, alerting, audit trails, containment, recovery, and post-incident evidence.
What it helps with
Use Observability And Incident Response to turn a focused Vibe Code Security Reviewer task into a clearer, repeatable workflow.
Example use
Ask Vibe Code Security Reviewer to apply observability and incident response to a real project, document, or decision and explain the assumptions it used.
Prompt pattern
Use Observability And Incident Response for [specific goal]. Context: [relevant files, audience, inputs, or constraints]. Return: [desired format] and flag uncertainties.
postgres database security
Review PostgreSQL schemas, grants, functions, views, migrations, and query safety.
What it helps with
Use Postgres Database Security to turn a focused Vibe Code Security Reviewer task into a clearer, repeatable workflow.
Example use
Ask Vibe Code Security Reviewer to apply postgres database security to a real project, document, or decision and explain the assumptions it used.
Prompt pattern
Use Postgres Database Security for [specific goal]. Context: [relevant files, audience, inputs, or constraints]. Return: [desired format] and flag uncertainties.
privacy and data governance
Review collection, minimization, retention, consent, logging, export, deletion, and third-party data flows.
What it helps with
Use Privacy And Data Governance to turn a focused Vibe Code Security Reviewer task into a clearer, repeatable workflow.
Example use
Ask Vibe Code Security Reviewer to apply privacy and data governance to a real project, document, or decision and explain the assumptions it used.
Prompt pattern
Use Privacy And Data Governance for [specific goal]. Context: [relevant files, audience, inputs, or constraints]. Return: [desired format] and flag uncertainties.
realtime and messaging security
Review realtime channels, WebSockets, queues, broadcasts, subscriptions, and message authorization.
What it helps with
Use Realtime And Messaging Security to turn a focused Vibe Code Security Reviewer task into a clearer, repeatable workflow.
Example use
Ask Vibe Code Security Reviewer to apply realtime and messaging security to a real project, document, or decision and explain the assumptions it used.
Prompt pattern
Use Realtime And Messaging Security for [specific goal]. Context: [relevant files, audience, inputs, or constraints]. Return: [desired format] and flag uncertainties.
secrets and data protection
Find exposed secrets and review sensitive-data collection, storage, logging, and transmission.
What it helps with
Use Secrets And Data Protection to turn a focused Vibe Code Security Reviewer task into a clearer, repeatable workflow.
Example use
Ask Vibe Code Security Reviewer to apply secrets and data protection to a real project, document, or decision and explain the assumptions it used.
Prompt pattern
Use Secrets And Data Protection for [specific goal]. Context: [relevant files, audience, inputs, or constraints]. Return: [desired format] and flag uncertainties.
security review reporting
Produce concise, evidence-backed security reports for developers and stakeholders.
What it helps with
Use Security Review Reporting to turn a focused Vibe Code Security Reviewer task into a clearer, repeatable workflow.
Example use
Ask Vibe Code Security Reviewer to apply security review reporting to a real project, document, or decision and explain the assumptions it used.
Prompt pattern
Use Security Review Reporting for [specific goal]. Context: [relevant files, audience, inputs, or constraints]. Return: [desired format] and flag uncertainties.
security testing and remediation
Convert findings into safe tests, prioritized fixes, regression coverage, and verification evidence.
What it helps with
Use Security Testing And Remediation to turn a focused Vibe Code Security Reviewer task into a clearer, repeatable workflow.
Example use
Ask Vibe Code Security Reviewer to apply security testing and remediation to a real project, document, or decision and explain the assumptions it used.
Prompt pattern
Use Security Testing And Remediation for [specific goal]. Context: [relevant files, audience, inputs, or constraints]. Return: [desired format] and flag uncertainties.
storage and upload security
Review object storage, file uploads, MIME validation, path ownership, malware risk, and download authorization.
What it helps with
Use Storage And Upload Security to turn a focused Vibe Code Security Reviewer task into a clearer, repeatable workflow.
Example use
Ask Vibe Code Security Reviewer to apply storage and upload security to a real project, document, or decision and explain the assumptions it used.
Prompt pattern
Use Storage And Upload Security for [specific goal]. Context: [relevant files, audience, inputs, or constraints]. Return: [desired format] and flag uncertainties.
supabase auth and sessions
Review Supabase Auth identity, JWT claims, sessions, recovery, OAuth, and account lifecycle security.
What it helps with
Use Supabase Auth And Sessions to turn a focused Vibe Code Security Reviewer task into a clearer, repeatable workflow.
Example use
Ask Vibe Code Security Reviewer to apply supabase auth and sessions to a real project, document, or decision and explain the assumptions it used.
Prompt pattern
Use Supabase Auth And Sessions for [specific goal]. Context: [relevant files, audience, inputs, or constraints]. Return: [desired format] and flag uncertainties.
supabase rls security
Perform deep Supabase Row Level Security, Data API exposure, policy, view, function, and role analysis.
What it helps with
Use Supabase Rls Security to turn a focused Vibe Code Security Reviewer task into a clearer, repeatable workflow.
Example use
Ask Vibe Code Security Reviewer to apply supabase rls security to a real project, document, or decision and explain the assumptions it used.
Prompt pattern
Use Supabase Rls Security for [specific goal]. Context: [relevant files, audience, inputs, or constraints]. Return: [desired format] and flag uncertainties.
threat modeling
Model assets, actors, trust boundaries, attack paths, and mitigations for an application.
What it helps with
Use Threat Modeling to turn a focused Vibe Code Security Reviewer task into a clearer, repeatable workflow.
Example use
Ask Vibe Code Security Reviewer to apply threat modeling to a real project, document, or decision and explain the assumptions it used.
Prompt pattern
Use Threat Modeling for [specific goal]. Context: [relevant files, audience, inputs, or constraints]. Return: [desired format] and flag uncertainties.
vibe code security reviewer
Route fast-built application reviews into focused threat, code, dependency, data, deployment, and remediation workflows.
What it helps with
Use Vibe Code Security Reviewer to turn a focused Vibe Code Security Reviewer task into a clearer, repeatable workflow.
Example use
Ask Vibe Code Security Reviewer to apply vibe code security reviewer to a real project, document, or decision and explain the assumptions it used.
Prompt pattern
Use Vibe Code Security Reviewer for [specific goal]. Context: [relevant files, audience, inputs, or constraints]. Return: [desired format] and flag uncertainties.
web application security
Review web applications for injection, XSS, CSRF, SSRF, unsafe redirects, uploads, and browser security weaknesses.
What it helps with
Use Web Application Security to turn a focused Vibe Code Security Reviewer task into a clearer, repeatable workflow.
Example use
Ask Vibe Code Security Reviewer to apply web application security to a real project, document, or decision and explain the assumptions it used.
Prompt pattern
Use Web Application Security for [specific goal]. Context: [relevant files, audience, inputs, or constraints]. Return: [desired format] and flag uncertainties.
A review is only as complete as the repository, configuration, logs, and evidence provided.
The plugin cannot certify legal compliance, guarantee security, or prove the absence of vulnerabilities.
Destructive exploitation and production changes require an authorized test environment and human approval.
