Leaderboard/Security/VibeSec-Skill
Last commit on February 17, 2026·Created on February 2, 2026

BehiSecc/VibeSec-Skill

A secure coding checklist for web applications, written from the bug hunter's perspective.
Combined rank
#248
across all skills
In Security
#14
category rank
Stars
1.3k
+0.9% in last 7d
Forks
109
+1.9% in last 7d
Watchers
8
0.0% in last 7d
Traction scoreGitHub stars can be faked, so popularity alone can be misleading. Traction Score looks for broader signs of recent attention, adoption, and active maintenance.
TL;DR

This skill guides Claude through writing secure web applications by covering the vulnerabilities that matter most: XSS, CSRF, IDOR, SSRF, SQL injection, file upload attacks, XXE, path traversal, and more. Each section provides implementation patterns, bypass techniques, and verification checklists. It helps web developers code with fewer exploitable paths and gives security engineers a structured reference for code reviews and audits.

WHO IT'S FOR
Web Application Developers
write secure code and prevent common vulnerabilities
Security Engineers / AppSec Reviewers
enforce secure coding practices
API Developers
prevent API security vulnerabilities
DevOps / Platform Engineers
configure security headers, CSP policies, and deployment safeguards
Repository contents

1 skill file

Compatible AgentsThe repository documents support for these agents. The skills may also work with other agents that can load SKILL.md files, but they may need some setup or small changes.

Use this skill

Follow the documented setup, then try a first task.

I’m using

Claude Code

Installs: Entire VibeSec-Skill repository; global or project-only installation · Claude Code

  1. In a terminal, clone the repository. Run this from the directory where you want the cloned VibeSec-Skill repository to be created.

    git clone https://github.com/BehiSecc/VibeSec-Skill
  2. Manually add the cloned repository to `~/.claude/skills` for a global installation, or to `.claude/skills` within your project directory for a project-only installation.

README.md · Checked Sep 18, 2026SKILL.md · Checked Sep 18, 2026

Give it something to do.

Suggested first task

Start a web application with secure coding practices

Uses VibeSec-Skill

  • Replace `[web app description]` with a concise description of the web application, including its framework and any authentication or sensitive-data requirements.
  • Provide the relevant project code or working context to review or modify.
Use VibeSec-Skill for this task. I'm building a [web app description]. Please follow secure coding practices.
README.md · Checked Sep 18, 2026SKILL.md · Checked Sep 18, 2026