Agent-native "safe to ship?" security gate for AI-generated code. Uses real parsers and inter-rocedural taint analysis (JS/TS, Python, Go) to flag the classes AI coding agents get wrong — secrets, SQL injection, SS, SSRF, path traversal, command injection, weak JWT/CORS — and ranks findings by confidence. Exposes a scan tool over MCP.
Not monetized yet
Turn vibecheck’s tool calls into revenue: one disclosed sponsored slot, 70% revenue share, fail-open by design.
Install vibecheck
For anyone using vibecheck — no Lulu account needed# stdio server — install per the repository README: https://github.com/arisrhiannon/vibecheck
Real-time weather for any city, built on the lulu-ads widget gallery. First-party, free forever.
View server →FAQ
vibecheck installs from source — follow the repository README.
Submitted directly to Lulu MCPs.
3 out of 100, computed from cross-registry traction signals (installs, stars, registry presence) — never influenced by sponsorship.
Similar servers
Works well together