Observed arrival · 2026-10-17
VibePreflight checks what AI-built apps might expose
A security review for apps built with AI coding tools, with ranked findings and fix prompts intended to be pasted back into an assistant.
- For
- Developers shipping apps built with AI coding tools
- Worth noticing
- The sample report shows 24 findings, including four critical issues, and is labeled as a demo-repo scan.
Field notes
The page names gitleaks, Semgrep, OSV-Scanner and npm audit, plus custom Supabase RLS checks, as the basis of its coverage. Buyers can connect GitHub, paste a repository link or upload a ZIP; live-URL and Supabase checks are optional. The operator says it uses read-only access, does not execute code, and deletes submitted code within seven days. Its disclaimer explicitly says the automated, best-effort review is not a penetration test or security guarantee.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue