Vibe Code Security Reviewer
ChatGPT pluginAudit real security risks
Vibe Code Security Reviewer performs advanced evidence-based security reviews of AI-generated and rapidly built applications. It checks Supabase RLS, authentication, authorization, tenant isolation, API leaks and misuse, inputs, secrets, uploads, dependencies, data exposure, AI tools, deployment configuration, and abuse paths, then prioritizes findings with practical remediation and verification steps.
- Featured
- No
not on the featured shelf
Movement
From our daily snapshots over the last 30 days.
Rank by placement
Rank in Security
In its category
How this plugin compares with others in the same category. Positions are counted within the category, not across the whole directory.
Security37th of 76 by placement
| # | Plugin | Position | 7d |
|---|---|---|---|
| 35 | #4705 | 22places down | |
| 36 | #4934 | 65places up | |
| 37 | #4978 | 210places up | |
| 38 | #5161 | 39places down | |
| 39 | #5211 | 72places down |
More from The Doers Firm
All listings by The Doers FirmImage Generator#2695 of 11,360 by placement
Write For Me#4622 of 11,360 by placement
Doers Lingua#4718 of 11,360 by placement
Translate GPT#4719 of 11,360 by placement
Web Research Assistant#4737 of 11,360 by placement
Cloudflare Security#4934 of 11,360 by placement
41 more on the publisher’s page.
Example prompts
- “Audit this app for the highest-risk vulnerabilities.”
- “Review this authentication flow and find bypasses.”
- “Check this AI-generated code before production.”
Skills
ai-application-security
Review AI features for prompt injection, data leakage, tool abuse, unsafe output, and excessive agency.
api-abuse-and-misuse
Review APIs for broken object authorization, excessive data, unsafe methods, rate-limit gaps, and abuse paths.
api-leak-and-key-security
Detect API keys, service credentials, tokens, and privileged endpoints leaked to clients or repositories.
authentication-and-authorization
Review login, sessions, tokens, roles, permissions, tenant isolation, and privileged actions.
cloudflare-and-deployment-security
Review Workers, Pages, storage bindings, deployment configuration, and production security controls.
dependencies-and-supply-chain
Review packages, lockfiles, scripts, provenance, licensing, advisories, and dependency risk.
edge-functions-and-webhooks
Review serverless functions, webhooks, signatures, retries, idempotency, and privileged execution.
observability-and-incident-response
Review security logging, alerting, audit trails, containment, recovery, and post-incident evidence.
postgres-database-security
Review PostgreSQL schemas, grants, functions, views, migrations, and query safety.
privacy-and-data-governance
Review collection, minimization, retention, consent, logging, export, deletion, and third-party data flows.
realtime-and-messaging-security
Review realtime channels, WebSockets, queues, broadcasts, subscriptions, and message authorization.
secrets-and-data-protection
Find exposed secrets and review sensitive-data collection, storage, logging, and transmission.
Show all 20Show fewer
security-review-reporting
Produce concise, evidence-backed security reports for developers and stakeholders.
security-testing-and-remediation
Convert findings into safe tests, prioritized fixes, regression coverage, and verification evidence.
storage-and-upload-security
Review object storage, file uploads, MIME validation, path ownership, malware risk, and download authorization.
supabase-auth-and-sessions
Review Supabase Auth identity, JWT claims, sessions, recovery, OAuth, and account lifecycle security.
supabase-rls-security
Perform deep Supabase Row Level Security, Data API exposure, policy, view, function, and role analysis.
threat-modeling
Model assets, actors, trust boundaries, attack paths, and mitigations for an application.
vibe-code-security-reviewer
Route fast-built application reviews into focused threat, code, dependency, data, deployment, and remediation workflows.
web-application-security
Review web applications for injection, XSS, CSRF, SSRF, unsafe redirects, uploads, and browser security weaknesses.
- Categories
- Made by
- The Doers Firm · Website
- Sign-in
- On Install
- Capabilities
- Analyze, Write
- Availability
- Available
- Version
- 0.1.0
- Created
- September 20, 2026
- More info
- Sponsorship
- Promote this plugin