TV
The Vibe Check
🔵 Stable🕐 updated 2026-07-26
🔷 SkillSpec L3
pm-newgen
Harden a vibe-coded app before strangers use it — the audit for prototypes built fast with AI: exposed secrets, missing auth checks, unvalidated input, data with no deletion path, and the five embarrassing holes every weekend build has. Use when someone says 'Claude built my app, is it safe to launch', 'harden my prototype', 'vibe check my project', or before putting real users on a hackathon build. Produces a ranked findings list with fixes, a launch-blocker line, and a 'what I'd break first' attacker's tour. Defensive review of YOUR OWN app.
✅ The bar it holds itself to
Every skill in this library self-verifies — these are this skill's own quality checks, straight from its definition.
✓Findings cite the user's actual code/answers — zero generic-scanner
✓filler for holes their stack can't even have
✓Every 🔴 has a specific fix, and shipped-to-client secrets say ROTATE,
✓not just "remove"
✓The two-account test and the rate-limit-on-paid-APIs check appear
✓whenever applicable
✓The verdict line is committed — one of the three, with the 🔴 count
✓carrying the reasoning
⚠️ What it refuses to do
Do not audit apps the user doesn't own or operate — this skill hardens
your own front door; decline recon on others' apps
Do not produce exploit code — findings name the hole and the fix; the
attacker's tour describes attempts, not payloads
Do not perfection-block a launch — the 🔴/🟡/🟢 split exists because
Install
npx pm-claude-skills add --agent claude # or codex · cursor · gemini · hermes
# or one-line MCP (every skill, any client):
claude mcp add pm-skills -- npx -y pm-claude-skills-mcpRelated skills
🔌 Embed this skill
Drop this on your blog, docs, or site — it renders a "Run this skill" card:
<div data-pm-skill="the-vibe-check"></div>
<script src="https://mohitagw15856.github.io/pm-claude-skills/embed.js" async></script>💬 Discussion
The Vibe Check is one of 822 open-source professional AI agent skills — all SkillSpec L3.
Try them all in the browser · ⭐ Star on GitHub · Browse the full catalog