VibeSec — безопасный код веб-приложений

vibe-coding

VibeSec-Skill is a Claude Code skill that helps write secure web applications and prevent common vulnerabilities. It is loaded via a SKILL.md file placed in the repository root and activates whenever Claude works on a web project or when a user requests a security scan or audit. The skill embeds a comprehensive secure coding guide covering access control, IDOR, XSS across direct and indirect input sources, CSRF protection for all state-changing endpoints, privilege escalation, and mass assignment — instructing Claude to approach every code review from a bug hunter's perspective. Authorization is enforced at the data layer, UUIDs are preferred over sequential IDs, and all user input is validated server-side. It suits developers who want continuous security checks built into their vibe-coding workflow rather than a separate audit phase.