vibe-sec
claudeSecurity gap finder for vibe-coded apps — the tier-aware audit and orchestration layer that defers to gitleaks/OSV-Scanner/Semgrep when present and falls back to an in-house baseline when absent. Full command surface, validated on a real Firebase app: /vibe-sec:audit (ten-concern tier-calibrated four-band report), :scan, :deps, :gate (CI-safe), :posture, :fix (confidence-routed with destructive-action overrides), :threat-model (STRIDE/DREAD + Mermaid + Threat Dragon export), and :research.
10 skills · 9 commands