vibeaudit

Plugin vibeaudit in Shankulkarni/vibe-audit. Commands read from the repo's manifest — 1 month ago.

Skills (11)

• audit-gdpr

  Audit codebase for GDPR compliance violations — PII in logs, missing consent gates, no delete-account flow, unacknowledged data processors, and cross-border transfer signals.

• audit-llm-prompt-injection

  Audit apps that call LLM APIs for prompt injection, key exposure, and unsafe output handling

• audit-nextjs-server-actions

  Audit Next.js Server Actions for missing auth, unvalidated input, and CSRF gaps

• audit-node-api-auth

  Audit Node.js API routes for missing auth, broken JWT verification, exposed admin endpoints, and missing rate limiting

• audit-react-native-secure-storage

  Audit React Native apps for insecure storage and transmission of sensitive data

• audit-react-xss

  Audit React applications for XSS vectors that AI generators commonly introduce

• audit-stripe-integration

  Audit Stripe integrations for webhook security, key management, and payment integrity gaps

• audit-supabase-rls

  Audit Supabase Row Level Security policies for gaps AI code generators commonly miss

• audit-typescript-any-escape

  Audit TypeScript codebases for any escapes that eliminate type safety at API and data boundaries

• audit-vercel-deployment

  Audit Vercel deployments for env var exposure, security headers, function risks, and source map exposure

• audit-vibecode-patterns

  Catch AI-specific slop patterns that code generators systematically produce

Slash commands (6)

• /vibeaudit:audit-ci
• /vibeaudit:audit-full
• /vibeaudit:audit-quick
• /vibeaudit:audit-report
• /vibeaudit:audit-security
• /vibeaudit:audit

Subagents (4)

• audit-orchestrator
• audit-performance-reviewer
• audit-quality-reviewer
• audit-security-reviewer