VibeLint

VibeLint secures your development workflow by scanning code generated by coding assistants before it integrates into your files. It acts as an MCP server, sitting between your development environment and the code generator. Key capabilities include: * Real-time security scanning of generated code * Detection of hard-coded API keys and secrets * Prevention of prompt injection vulnerabilities * Identification of SQL and NoSQL injection risks * Blocking of dangerous LLM output execution (e.g., via eval(), exec()) This tool ensures that even when you're developing rapidly with coding helpers, critical security flaws are caught proactively. It prevents issues like unsanitized user input being passed to large language models or vulnerable dependencies from entering your project. The system automatically flags violations and can even propose fixes. VibeLint is ideal for development teams and individual developers leveraging coding assistants, who need to maintain stringent security standards without sacrificing development speed.