For vibe coders who ship fast and don't want to get hacked. Preflight Security Audit plugin checks your app before its launch. One command finds the security, privacy, and payment vulnerabilities in your code and fixes them. 50+ security checks in 6 categories.
akirtok/preflight-security-audit
Agent
Runs Track 3 (AI/LLM security) of the Preflight Security Audit — prompt injection (direct + indirect), LLM output handling, sensitive-info disclosure, excessive agency/tool permissions, and AI supply chain. Applies when the product calls an LLM or ships an AI feature. Context: The /audit command detected an AI SDK in…
akirtok/preflight-security-audit
Agent
Runs Track 1 (the 20 code-core passes) of the Preflight Security Audit — injection, auth, authz/IDOR, secrets, error handling, concurrency, resources, N+1, complexity, memory, external calls, idempotency, transactions, config, deps, logging, contracts, tests. Context: The /audit command is fanning out the audit…
akirtok/preflight-security-audit
Agent
Runs Track 6 (verification & false-positive filter) of the Preflight Security Audit. Re-checks every raw finding against the code, rejects unprovable ones, merges duplicates, and recalibrates severity before the report is assembled. Always run last. Context: The /audit command has collected raw findings from all track…
akirtok/preflight-security-audit
Agent
Runs Track 5 (product & launch readiness) of the Preflight Security Audit — accessibility (WCAG 2.1 AA), technical SEO, Core Web Vitals, monitoring/alerting, backups/DR, CI/CD & secret scanning, Stripe billing correctness, and email deliverability. Context: The /audit command is fanning out the audit tracks. user…
akirtok/preflight-security-audit
Agent
Runs Track 4 (privacy & compliance) of the Preflight Security Audit — PII inventory & data flow, GDPR/KVKK consent & lawful basis, cookie consent, data retention & deletion (RTBF), sub-processor DPAs, and legal pages. Context: The /audit command is fanning out the audit tracks. user: "Run the privacy and compliance…
akirtok/preflight-security-audit
Agent
Runs Track 2 (web/app security) of the Preflight Security Audit — XSS, CSRF, SSRF, security headers/CORS/TLS, cryptography, file upload, rate limiting, multi-tenancy & Supabase RLS, business-logic abuse, and data integrity/deserialization. Context: The /audit command is fanning out the audit tracks. user: "Run the web…