Audit a vibe-coded app for leaked secrets, missing RLS and dead buttons
Vibe Aegis v2.0 is an open-source safeguard and adversarial audit loop that runs in one command across Claude Code, Codex and Cursor. It targets what agents often ship: exposed NEXT_PUBLIC_ secrets, tables without row-level security, IDOR bugs, client-trusted checkout prices, double-spend race conditions and dead placeholder links.
Source
@rsg_rishi on X · 2026-10-18
Written in our own words. Credit to the original author. Link checked 2026-10-18.
What they did
Vibe Aegis v2.0 is an open-source safeguard and adversarial audit loop that runs in one command across Claude Code, Codex and Cursor. It targets what agents often ship: exposed NEXT_PUBLIC_ secrets, tables without row-level security, IDOR bugs, client-trusted checkout prices, double-spend race conditions and dead placeholder links.
Result (as claimed)
Open source.
Tools they used
Cost: Claude Code: from $17/mo; OpenAI Codex: free plan, paid from $8/mo; Cursor: free plan, paid from $8/mo.
Set it up
Pick a contained repo or task
Start on a branch or side project where mistakes are cheap.
Install and configure
Set up Claude Code, OpenAI Codex, Cursor. Read what it can run on your machine and limit permissions where possible.
Run it on a real task
Give it a well-scoped issue and let it work. Review the diff like any pull request.
Add guardrails
Keep tests and CI in the loop, and never let an agent push to main or touch production secrets unattended.
Copy the full setup prompt
Paste into your agent and it will walk you through the setup, asking before anything that sends, posts or spends.
You are helping me set up this AI use case end to end in Claude Code. Goal: Audit a vibe-coded app for leaked secrets, missing RLS and dead buttons What the original author did: Vibe Aegis v2.0 is an open-source safeguard and adversarial audit loop that runs in one command across Claude Code, Codex and Cursor. It targets what agents often ship: exposed NEXT_PUBLIC_ secrets, tables without row-level security, IDOR bugs, client-trusted checkout prices, double-spend race conditions and dead placeholder links. Reported result (as claimed by the author): Open source. Source: https://x.com/rsg_rishi/status/2111880988280385981 Tools they used: Claude Code, OpenAI Codex, Cursor Category: Dev & ops Please: 1. Ask me 3 short questions about my situation (accounts I have, budget, what I want the output to look like). 2. Propose a step-by-step plan using these tools or cheaper alternatives, with the time and cost of each step. Use official pricing pages; say "check pricing" if unsure. 3. Then do the setup with me one step at a time, waiting for my OK before anything that sends messages, posts publicly, spends money or deletes data. 4. Finish with a checklist to run it again next time.
You are helping me set up this AI use case end to end in Codex. Goal: Audit a vibe-coded app for leaked secrets, missing RLS and dead buttons What the original author did: Vibe Aegis v2.0 is an open-source safeguard and adversarial audit loop that runs in one command across Claude Code, Codex and Cursor. It targets what agents often ship: exposed NEXT_PUBLIC_ secrets, tables without row-level security, IDOR bugs, client-trusted checkout prices, double-spend race conditions and dead placeholder links. Reported result (as claimed by the author): Open source. Source: https://x.com/rsg_rishi/status/2111880988280385981 Tools they used: Claude Code, OpenAI Codex, Cursor Category: Dev & ops Please: 1. Ask me 3 short questions about my situation (accounts I have, budget, what I want the output to look like). 2. Propose a step-by-step plan using these tools or cheaper alternatives, with the time and cost of each step. Use official pricing pages; say "check pricing" if unsure. 3. Then do the setup with me one step at a time, waiting for my OK before anything that sends messages, posts publicly, spends money or deletes data. 4. Finish with a checklist to run it again next time.
You are helping me set up this AI use case end to end in Grok Bot. Goal: Audit a vibe-coded app for leaked secrets, missing RLS and dead buttons What the original author did: Vibe Aegis v2.0 is an open-source safeguard and adversarial audit loop that runs in one command across Claude Code, Codex and Cursor. It targets what agents often ship: exposed NEXT_PUBLIC_ secrets, tables without row-level security, IDOR bugs, client-trusted checkout prices, double-spend race conditions and dead placeholder links. Reported result (as claimed by the author): Open source. Source: https://x.com/rsg_rishi/status/2111880988280385981 Tools they used: Claude Code, OpenAI Codex, Cursor Category: Dev & ops Please: 1. Ask me 3 short questions about my situation (accounts I have, budget, what I want the output to look like). 2. Propose a step-by-step plan using these tools or cheaper alternatives, with the time and cost of each step. Use official pricing pages; say "check pricing" if unsure. 3. Then do the setup with me one step at a time, waiting for my OK before anything that sends messages, posts publicly, spends money or deletes data. 4. Finish with a checklist to run it again next time.
The Daily 5
Get five new use cases tomorrow morning
Free. Real sources. Unsubscribe any time.
Guides for this use case
How to vibe code an app with Claude Code · How to run multiple coding agents together · How to secure vibe-coded apps and agents · How to use AI agents for errands, calls and shopping
Related use cases
Browse, back up and move your local AI coding chats between CLIs
An open-source app that shows all your locally saved AI chats across accounts for Claude Code, Codex, Cursor, Gemini CLI, OpenCode and Cline. You can view, back up, export or copy chats, or continue a chat in another CLI.
Copy ready-made GitHub workflows that run Claude Code, Codex and Cursor
A free collection of 63 copy-paste GitHub workflow files for Claude Code, Codex, Cursor and gh-aw. They cover the trigger, permissions and prompt placement that take longest to get right.
Track token spend across Claude Code, Codex and Cursor in one local window
LunoPeak shows every AI coding session in one local window with live sessions, per-session token spend and budget alerts. No account, no cloud and no telemetry.
Keep all your Claude Code, Codex and Cursor chats searchable in one place
ChatVault collects chats from Claude Code, Codex and Cursor across accounts, lets you search the whole history and keeps local backups.