Vibe Security Audit

Vibe Security Audit

Perform a 30-point security audit on the target code. If an argument is provided, focus on $ARGUMENTS. Otherwise, audit the entire project.

Contents

• Critical checks (1, 3, 5, 6, 11): See checks/critical.md
• Foundation & common checks (2, 4, 7-10, 12-20): See checks/standard.md
• Production readiness checks (21-30): See checks/production.md

Step 1: Detect Tech Stack

Identify what to check by examining these files:

Skip checks that don't apply to the detected stack.

Step 2: Run Audit

Copy this checklist and check off items as you complete them:

Audit Progress:
- [ ] Step 1: Detect tech stack
- [ ] Step 2a: Run critical checks (1, 3, 5, 6, 11) — see checks/critical.md
- [ ] Step 2b: Run standard checks (2, 4, 7-10, 12-20) — see checks/standard.md
- [ ] Step 2c: Run production checks (21-30) — see checks/production.md
- [ ] Step 3: Calculate score and compile report

Run critical checks first — read checks/critical.md and execute all 5 checks before proceeding.

Then read checks/standard.md and checks/production.md for remaining checks. Skip any that don't apply to the detected stack.

Step 3: Score and Report

Severity Scale

Project score = 100 minus sum of severity scores for all issues found (minimum 0).

Output Format

# Security Audit Report

## Detected Tech Stack
- **Framework**: [detected]
- **Database**: [detected]
- **Auth**: [detected]
- **Deployment**: [detected]
- **Other**: [AI APIs, payment, email, storage if detected]

## Summary
[1-2 sentence overview]

**Project Score**: [X/100] — [Rating]
**Checks Run**: [X/30]
**Issues Found**: [count]

## Quick Wins (fixable in under 10 minutes)
| # | Issue | Severity | Fix Time | Fix |
|---|-------|----------|----------|-----|
| 1 | [issue] | [X/10] | [time] | [one-line fix] |

## Critical Issues (Severity 8-10)
- **[Check Name]** (Severity: X/10)
  - File: [file:line]
  - Pattern matched: [what was found]
  - Fix: [specific remediation]

## High Priority (Severity 6-7)
[Same format]

## Medium Priority (Severity 4-5)
[Same format]

## Low Priority (Severity 1-3)
[Same format]

## Passed Checks
[Check number and name for each passing check]

## Not Applicable
[Check number, name, and reason skipped]

Reference exact files and line numbers. Show which pattern matched. Provide actionable fix instructions for every issue.

Converted and distributed by TomeVault — claim your Tome and manage your conversions.