Vibe Audit (open-source AST-based security CLI)

An open-source AST-based security CLI designed to validate AI-generated code before it hits production.

VibeAudit serves as a critical gate for developers using AI coding agents like Claude Code, Cursor, or Windsurf. By performing Abstract Syntax Tree (AST) analysis, the CLI identifies high-risk patterns common in vibe-coded projects: including hardcoded secrets, permissive CORS configurations, and unauthenticated API routes. It generates structured, agent-readable JSON output, allowing AI assistants to ingest scan results and self-correct vulnerabilities autonomously. With zero-config detection for stacks like Node.js and Python, VibeAudit ensures that rapid AI development does not bypass essential security benchmarks.

https://github.com/LarsCanGit/VibeAudit