Favors.dev
About VibeCheck
vibecheck is a security scanner for GitHub repositories built by developers who use AI coding assistants. It runs four real static analysis tools — Gitleaks, Semgrep, njsscan, and custom checks — against your codebase, then uses Claude AI to explain the findings in plain language and suggest fixes.
Frequently asked questions about VibeCheck
What does VibeCheck do?+
vibecheck is a security scanner for GitHub repositories
Who is VibeCheck for?+
It is designed for developers who use AI coding assistants.
How is vibecheck different from asking an AI to review my code?+
Asking an AI chatbot to review code is non-deterministic and context-limited — it guesses based on what it can see in one prompt window. vibecheck runs deterministic static analysis tools against your full codebase. Claude only appears at the end to translate and prioritize confirmed findings, never to detect vulnerabilities from scratch.
What security scanners does vibecheck run?+
vibecheck runs four scanners in sequence: Gitleaks for exposed secrets and API keys; Semgrep for OWASP Top 10 code patterns including SQL injection, XSS, and path traversal; njsscan for Node.js-specific patterns like missing security headers and eval usage; and 48 custom checks written specifically for AI-generated app patterns — covering secrets exposure, access control, injection attacks, supply chain (malicious postinstall scripts, obfuscated dependencies, binary executables, GitHub Actions permission escalation), AI agent prompt injection (detecting "ignore previous instructions" and cover
Community reviews
luminaMember · 28d agoVibeCheck makes security reviews much easier by scanning the full scope of a GitHub repository instead of forcing you to check things piece by piece. The GitHub integration is straightforward, and the results are clear enough to quickly understand what needs attention. Especially useful if you ship fast and want an extra security check before pushing changes to production. Simple idea, well executed, and genuinely useful for developers working with AI-generated or rapidly evolving codebases.
Support this launch
Members earn points for sharing, reviewing, and giving feedback on VibeCheck. Not a member yet?
Join Favors.dev