vibeship-scanner - a free vulnerability and security scanner for vibe

项目说明

Scanner

A security scanning tool designed for vibe coders. Analyzes GitHub repositories for and generates AI-ready fix prompts.

Try It Free

scanner..co — Paste any public GitHub repo URL and get a full security scan in minutes. No signup required.

---

MCP Integration (Claude, Cursor, AI Assistants)

Use Scanner directly from Claude or any MCP-compatible AI assistant.

Quick Setup

Add to your Claude Desktop config:

What You Can Do

| Command | What happens |
|---------|-------------|
| "Scan | Runs 16 security scanners on the repo |
| "Fix these security issues" | Creates a task list and fixes all issues systematically |
| "This is a false positive" | Reports FP with ultra-privacy (no code sent) |
| "What is C?" | Looks up details |

Example Session

Full documentation: MCP_USAGE.md

---

How AI Fix Prompts Work

Vibe coding with AI assistants is great for building fast, but security can slip through. Scanner bridges that gap:

1. Scan your repo — The scanner runs Opengrep (SAST), Tri), Gitleaks (secrets), and npm audit against your codebase
2. Get findings in plain English — No security jargon, just clear explanations of what's wrong and why it matters
3. Copy the AI fix prompt — Each finding includes a ready-to-paste prompt for Claude, Cursor, ChatGPT, or any AI coding assistant
4. Let your AI fix it — The prompt contains the exact file, line number, code pattern, and specific fix instructions

Example AI Fix Prompt

The prompts are designed to give your AI assistant e it needs to make the fix correctly on the first try.

Master Fix Prompt

For repos with multiple findings, copy or download the Master Fix Prompt — a single prompt that instructs your AI to systematically work through all one by one.

Features

Tech Stack

Getting Started

Prerequisites

Installation

En

Usage

1. Visit the app at
2. Enter a GitHub repository URL
3. Wait for the scan to complete
4. Review findings with AI-ready fix prompts
5. Copy the master prompt to fix all issues at once

Scanner Rules

The scanner includes 2,200+ custom security rules across 15+ languages co:

API

Trigger a Scan

View Results

Results are a at:

Contributing

Contributions are welcome! Please feel free to submit a Pull Request.

Adding New Rules

1. Add rules to scanner/rules/{language}.yaml
2. : opengrep -- -f scanner/rules/
3. Add corresponding fix hints in src/lib/aiFixPrompts.ts
4. Deploy scanner: cd scanner && fly deploy --remote-only

License

This project is licensed under the Apache License 2.0 - see the LICENSE file for details.

Links

项目信息

开发语言：Python

Star 数：129

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕a free vulnerability and security scanner for vibe coders, with 2000+ rulesets, and copy pasteable Master AI Fix Prompt to fix vulnerabilities展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。