vibecheck – Production Readiness & AI Code Safety
Blocks fake data, missing wiring, and unsafe AI code before prod.
Website •
GitHub •
Documentation
Why vibecheck?
AI coding assistants generate code fast—but they also generate:
- Hallucinated imports that don't exist
- Mock data that looks real but isn't wired up
- Fake success patterns where buttons do nothing
- Missing auth checks on sensitive routes
vibecheck catches these issues before they reach production.
Features
🛡️ Score Badge
Real-time workspace health score in your status bar:
- 🟢 80+ — Ready to ship
- 🟡 50-79 — Needs attention
- 🔴 <50 — Critical issues
🔍 Inline Diagnostics
Problems appear directly in the Problems tab:
- Hardcoded secrets
- Mock/fake data in production paths
- Unhandled errors
- Missing API wiring
🏷️ CodeLens Warnings
Above each function:
- "Mock detected in prod path"
- "No auth check"
- "Silent error catch"
🤖 AI Code Validation
Select any AI-generated code and validate it:
- Detects hallucinated packages
- Catches intent mismatches
- Flags unsafe patterns
📊 Dashboard
Full project health at a glance:
- Production readiness score
- Issue breakdown by category
- One-click scan
Quick Start
- Install from VS Code Marketplace
- Press
Ctrl+Shift+G (or Cmd+Shift+G on Mac) to scan your workspace
- Check the score badge in your status bar
- Fix issues shown in the Problems panel
Commands
| Command |
Shortcut |
Description |
| vibecheck: Scan Workspace |
Ctrl+Shift+G |
Full workspace scan |
| vibecheck: Validate AI Code |
Ctrl+Shift+V |
Check selected AI code |
| vibecheck: Show Dashboard |
— |
Open health dashboard |
| vibecheck: Analyze Selection |
Ctrl+Shift+R |
Analyze selected code |
What It Catches
| Issue |
Severity |
Example |
| Hardcoded Secrets |
🔴 Critical |
apiKey = "sk-..." |
| Mock in Production |
🔴 Critical |
if (process.env.NODE_ENV !== 'test') with mock data |
| Silent Failures |
🔴 Critical |
catch (e) {} |
| Hallucinated Imports |
🟡 Warning |
Importing packages that don't exist |
| Missing Auth |
🟡 Warning |
Unprotected admin routes |
| No Error Handling |
🟡 Warning |
JSON.parse() without try-catch |
| Debug Code |
💡 Info |
console.log in production |
Settings
| Setting |
Default |
Description |
vibecheck.enabled |
true |
Enable vibecheck |
vibecheck.showScoreBadge |
true |
Show score in status bar |
vibecheck.analyzeOnSave |
true |
Scan on file save |
vibecheck.scanProfile |
ship |
Default scan depth |
vibecheck.apiKey |
— |
API key for premium features |
CI Integration
Add vibecheck to your CI pipeline:
# .github/workflows/vibecheck.yml
- name: vibecheck Gate
run: npx vibecheck gate --policy=strict
Block deploys when score drops below threshold.
Premium Features
With a vibecheck API key:
- Reality Mode — Browser testing with Playwright
- Autopilot — Weekly health reports
- Compliance — SOC2/HIPAA/GDPR checks
- Team Dashboard — Org-wide visibility
Get your API key at vibecheckai.dev
Privacy & Security
- ✅ Local analysis — Core checks run entirely on your machine
- ✅ No telemetry — We don't track your code or behavior
- ✅ Opt-in cloud — Premium features require explicit API key
- ✅ Open source — View the code
Requirements
- VS Code 1.85.0+
- Node.js 18+ (for CLI features)
Support
Made with ❤️ by the vibecheck team
