# vbsec

> Scans AI-written code for the 21 most common vulnerability types, explains each one in plain words, and shows the fixed code.

A community Agent Skill by tanviet12 for checking AI-written code for security holes. It reads your code, traces data from user input to dangerous calls rather than matching strings, and reports each issue with why it's dangerous, how an attacker would use it, the current code and the fix. It's written for people who aren't security experts.

What it catches
- 21 common vulnerability types, including secrets in source code, SQL injection, broken access control, JWTs accepted without signature checks and wide-open CORS
- Deep coverage of Go, PHP, TypeScript and JavaScript, Python and .NET, including Express, NestJS, Next.js, React, Django, FastAPI, Laravel and ASP.NET Core

How it works
- Scan the whole repo, only uncommitted changes, one commit, one pull request or the last few days of commits, or a plain folder without git.
- Large repos are split across several agents in parallel and the results merged.
- Reports are saved as files in vbsec-reports/, in English or Vietnamese, with a JSON summary for CI.
- Install it as a skill for your coding agent, following the README's install steps.

Good to know
- The repo ships sample apps with planted bugs that it tests itself against.
- It finds and explains issues; you decide which fixes to apply.
- MIT licensed.

- Type: Skill
- Made by: tanviet12
- Category: Security
- Formats: Skills
- Version: latest
- Source: https://github.com/tanviet12/vbsec
- Page: https://pluginboard.ai/skills/vbsec

## Works with

- ChatGPT
- Claude
- Gemini
- GitHub Copilot
- Cursor
- Claude Code
- Codex
- Antigravity
- Gemini CLI
- Replit
- OpenClaw
- OpenCode
- Hermes Agent

## Install

### ChatGPT

In ChatGPT: Download the vbsec folder and zip it, then Plugins → Skills → Create → Upload from your computer. Business and Enterprise plans.

View the skills on GitHub: https://github.com/tanviet12/vbsec

### Claude

In Claude (web or desktop): Download each skill’s folder and zip it, then upload them one at a time in Customize → Skills.

View the skills on GitHub: https://github.com/tanviet12/vbsec

### Gemini

In Gemini: Download the vbsec folder, then at gemini.google.com click Customize → Skills → Create → Upload and pick the folder (or a .zip of it).

View the skills on GitHub: https://github.com/tanviet12/vbsec

### GitHub Copilot

Copy all 1 skills, in your terminal:

```shell
npx -y degit tanviet12/vbsec/skills/antigravity/vbs-scan-security ~/.copilot/skills/vbs-scan-security
```

View the skills on GitHub: https://github.com/tanviet12/vbsec

### Cursor

Copy all 1 skills, in your terminal:

```shell
npx -y degit tanviet12/vbsec/skills/antigravity/vbs-scan-security ~/.cursor/skills/vbs-scan-security
```

View the skills on GitHub: https://github.com/tanviet12/vbsec

### Claude Code

Copy all 1 skills, in your terminal:

```shell
npx -y degit tanviet12/vbsec/skills/antigravity/vbs-scan-security ~/.claude/skills/vbs-scan-security
```

View the skills on GitHub: https://github.com/tanviet12/vbsec

### Codex

Copy all 1 skills, in your terminal:

```shell
npx -y degit tanviet12/vbsec/skills/antigravity/vbs-scan-security ~/.agents/skills/vbs-scan-security
```

View the skills on GitHub: https://github.com/tanviet12/vbsec

### Antigravity

In Antigravity: Copy the vbsec folder into ~/.gemini/config/skills (Antigravity app and IDE) or ~/.gemini/antigravity-cli/skills (Antigravity CLI).

View the skills on GitHub: https://github.com/tanviet12/vbsec

### Gemini CLI

Copy all 1 skills, in your terminal:

```shell
npx -y degit tanviet12/vbsec/skills/antigravity/vbs-scan-security ~/.gemini/skills/vbs-scan-security
```

View the skills on GitHub: https://github.com/tanviet12/vbsec

### Replit

Copy all 1 skills, in your terminal:

```shell
npx -y degit tanviet12/vbsec/skills/antigravity/vbs-scan-security .agents/skills/vbs-scan-security
```

View the skills on GitHub: https://github.com/tanviet12/vbsec

### OpenClaw

Copy all 1 skills, in your terminal:

```shell
npx -y degit tanviet12/vbsec/skills/antigravity/vbs-scan-security ~/.openclaw/skills/vbs-scan-security
```

View the skills on GitHub: https://github.com/tanviet12/vbsec

### OpenCode

Copy all 1 skills, in your terminal:

```shell
npx -y degit tanviet12/vbsec/skills/antigravity/vbs-scan-security ~/.config/opencode/skills/vbs-scan-security
```

View the skills on GitHub: https://github.com/tanviet12/vbsec

### Hermes Agent

Copy all 1 skills, in your terminal:

```shell
npx -y degit tanviet12/vbsec/skills/antigravity/vbs-scan-security ~/.hermes/skills/vbs-scan-security
```

View the skills on GitHub: https://github.com/tanviet12/vbsec

---
From Pluginboard (https://pluginboard.ai).