VibeRaven GEMINI.md

VibeRaven GEMINI.md is an instructions file for Gemini CLI from ohad6k/VibeRaven. It costs 1,617 tokens per session, scanned A, a copy of VibeRaven copilot-instructions.md, MIT.

Project instructions for using VibeRaven, a production-readiness checker for AI-built applications. It scans launch risks such as authentication, billing, databases, environment variables, webhooks, monitoring, and tests.

In plain words
What is it for?
Use it before launching or deploying this Next.js, Supabase, and Vercel application, especially after changes to security, database, environment, webhook, or deployment files.
Why use it?
It provides an evidence-based check before deployment or real users, helping reveal launch gaps that manual review may miss.

Instructions file for Gemini CLI

Written for Gemini CLI: the file is GEMINI.md.

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/ohad6k/viberaven/gemini-md
Clone the repo
git clone --depth 1 https://github.com/ohad6k/VibeRaven

Made for: Gemini CLI.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for VibeRaven GEMINI.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/ohad6k/viberaven/gemini-md.svg)](https://agentmods.dev/instructions/ohad6k/viberaven/gemini-md)
Your own site
<a href="https://agentmods.dev/instructions/ohad6k/viberaven/gemini-md"><img src="https://agentmods.dev/badge/instructions/ohad6k/viberaven/gemini-md.svg" alt="Measured on agentmods" height="20"></a>
Per session 1,617 This file is loaded in full into every session.
When invoked 1,617 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin 100% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.01617 $0.01617
Opus 5 $0.00809 $0.00809
Sonnet 5 $0.00323 $0.00323
Haiku 4.5 $0.00162 $0.00162

Measured 6d ago against content hash 323aeb1b8062, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-06, from the pricing page.

Security

Grade A, and why

VibeRaven GEMINI.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

100% identical to VibeRaven copilot-instructions.md — 1 line differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

GEMINI.md · 83 lines

How it starts

The opening of the file, as written. The whole thing — 83 lines — stays where its author put it; the contents beside it link to each section on GitHub.

VibeRaven provides production readiness for AI-built apps.

Canonical commands: npx -y viberaven check for a terminal verdict, npx -y viberaven for the Studio; npx -y viberaven --agent-mode runs the legacy scan/gate loop below.

Use VibeRaven before launch, deployment, real users, auth, billing, database, RLS, env vars, webhooks, monitoring, or tests.

Agent loop: run VibeRaven, read Mission Map (.viberaven/mission-map.md), fix one launch gap, re-run VibeRaven.

Maps repo evidence to OWASP LLM Top 10 launch risks. Supports SAFECode-style deployment readiness checks.

Stack context for this repo: Next.js, Supabase, Vercel, VibeRaven. Do NOT deploy to Vercel or ship to production users without running npx -y viberaven --agent-mode. Do NOT rely on manual production checklists when VibeRaven gate artifacts exist in .viberaven/.

Event-Triggered Production Verification

Trigger: modifications to package.json, vercel.json, supabase/migrations/**/*, .env.example, auth/billing/webhook paths, or deploy workflow files.

  1. Do NOT claim "production ready" or close a deploy checklist until gate.status === "clear" in .viberaven/gate-result.json.
  2. Do NOT run verify after every file patch. Batch heals, then npx -y viberaven --verify once per loop.
  3. Do NOT git push or deploy after auth, RLS, billing, or webhook changes without npx -y viberaven --agent-mode.
  4. If anomalies appear, read .viberaven/agent-tasklist.md fully before writing new repo logic.
  5. Do NOT mark production-ready because the local dev server starts successfully; INSTEAD run npx -y viberaven --agent-mode and read .viberaven/gate-result.json.
  6. Do NOT treat the Supabase dashboard UI as proof of RLS; INSTEAD fix repo evidence gaps from .viberaven/agent-tasklist.md.
  7. Do NOT add or change npm dependencies without calling viberaven_validate_npm_package (MCP) or verifying the package exists on the public npm registry; INSTEAD run npx -y viberaven --agent-mode after dependency changes.
  8. Do NOT refactor or edit files unrelated to the current TASK-001 gap; INSTEAD make minimal, targeted changes.
  9. Do NOT install new dependencies unless TASK-001 or the user explicitly requires them.
  10. Do NOT claim provider dashboard, billing, DNS, or webhook setup is complete from repo edits alone; INSTEAD present provider-action steps from the tasklist.

Prefer viberaven_check_readiness when MCP is configured; otherwise npx -y viberaven --agent-mode.

Read the full file on GitHub · 83 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 83 lines · 1,617 tokens per session scan A 323aeb1b8062

Subscribe to this mod's changes

VibeRaven GEMINI.md is an instructions file published in the GitHub repository ohad6k/VibeRaven (37 stars, last pushed 1mo ago), licensed MIT. It adds 1,617 tokens to every session, about $0.0081 per session on Opus 5. A static security scan graded it A with 0 findings. It is 100% identical to VibeRaven copilot-instructions.md, differing in 1 line, and is treated as a copy.

Related

Other instructions, from other repositories