Technology & Engineering14 skills

Vibe Coding Security skills for AI agents

14 practitioner-grade vibe coding security skills, each a focused Markdown document your agent loads into context on demand. Search them from Claude Desktop, Cursor or any MCP client, or pull one with the CLI.

$ npx skilldb search "vibe coding security"

All 14 skills

AI-Specific Vulnerabilities
When you add AI features to your application — chatbots, RAG search, AI-powered actions — you introduce an entirely new class of vulnerabilities. Prompt…
378 lines
Authentication and Authorization Patterns
AI-generated auth code is the most dangerous code in your application. It produces JWTs with no expiry, stores tokens in localStorage (XSS-accessible), skips…
369 lines
Container and Deployment Security
AI-generated Dockerfiles run everything as root, use latest tags, embed secrets in environment variables, install unnecessary tools, and skip health checks.…
420 lines
Credential Management
AI-generated code loves hardcoded secrets. API keys inline, database passwords in config files, tokens committed to git. The AI doesn't understand that the…
391 lines
Database Security Hardening
AI-generated database code is functionally correct and almost always insecure. It concatenates strings into SQL queries, connects as root, skips TLS, and…
323 lines
Dependency Supply Chain Security
AI coding tools install packages without thinking. "Add a date library" becomes npm install moment — a 4.2MB package with known vulnerabilities, when date-fns…
362 lines
Error Handling and Information Leakage
AI-generated error handling is designed for debugging, not production. It returns full stack traces to the client, logs passwords in request bodies, exposes…
391 lines
Input Validation Patterns
AI-generated code trusts user input by default. It parses JSON without schema validation, builds queries from URL parameters, accepts file uploads without…
329 lines
Least-Privilege Permissions
AI coding tools default to "make it work" — and the fastest way to make it work is to grant full access everywhere. Admin IAM roles, root database users…
323 lines
Production Hardening Checklist
AI gets your application running. This checklist gets it running safely. Every item here has been found missing in production AI-generated codebases. Work…
385 lines
Real-Time Security Monitoring
Most teams treat security scanning as a CI/CD gate — a check that runs after the code is pushed. By then, the vulnerability is committed, the secret is in git…
385 lines
Secure API Design
AI-generated APIs work great in demos and fall apart in production. They return too much data, accept requests from anywhere, have no rate limits, and use JWTs…
402 lines
Secure File Handling
AI-generated file handling code accepts any upload, stores it in the web root, serves it with the original filename, and never validates the content. A user…
374 lines
Trust Misconfiguration Audit
The most common vulnerability in AI-generated code isn't SQL injection or XSS — it's trust misconfiguration. Code that assumes everything is fine. Open CORS…
320 lines