What is VibeSec-Skill?
VibeSec-Skill is a Claude skill by BehiSecc that helps write secure code by preventing common vulnerabilities including IDOR, XSS, SQL injection, SSRF, and weak authentication, approaching code from a bug hunter's perspective. It is listed under Engineering practice and has 1,353 GitHub stars.
| Type | Claude skill |
|---|---|
| Author | BehiSecc |
| Repository | BehiSecc/VibeSec-Skill |
| Popularity | 1,353 GitHub stars |
| Category | Engineering practice |
| Security | Low risk (80/100) |
| Rank | #659 of 1,262 Claude skills; #96 in Engineering practice |
| SKILL.md length | 758 lines |
| License | Apache-2.0 |
| Last commit | 2026-02-17 |
| Stars this week | +37 |
Is VibeSec-Skill safe to install?
VibeSec-Skill scores 80/100 on the MCPMods security check: Low risk. Things to review: contains destructive commands. It passed 6 of 9 checks.
Skill results come from a static scan of its SKILL.md for instruction overrides, hidden actions, risky commands and credential access.
| Check | Result |
|---|---|
| No instruction-override phrases | Pass |
| No hidden actions | Pass |
| No pipe-to-shell installers | Pass |
| No obfuscated code | Pass |
| Contains destructive commands | Review |
| Reads keys or credentials | Note |
| Makes network requests | Note |
| No shell commands | Pass |
| Installs no packages | Pass |
What the scan matched
- destructive command:
rm -rf / - credentials:
credentials - network:
https://
How do I install VibeSec-Skill?
- Install with the skills CLI. Works for Claude Code and other agents that read skills.
npx skills add https://github.com/BehiSecc/VibeSec-Skill --skill VibeSec-Skill
- Or copy it by hand. Claude Code loads any folder with a SKILL.md from ~/.claude/skills.
git clone https://github.com/BehiSecc/VibeSec-Skill cp -r VibeSec-Skill/VibeSec-Skill ~/.claude/skills/VibeSec-Skill
- Use it. Claude loads the skill when a task matches its description. You can also name it in your prompt.
Use the VibeSec-Skill skill to …
Or ask Claude to set it up
Paste this into Claude Code and it installs VibeSec-Skill for you:
Install the "VibeSec-Skill" skill from https://github.com/BehiSecc/VibeSec-Skill into ~/.claude/skills, then tell me in one line what it does.