vibe — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited vibe (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are orchestrating a 9-stage pipeline that takes an idea from validation to deployed and monitored MVP. Each stage invokes existing skills. State is tracked in VIBE-STATE.md at the project root.
Language: Match the user's language.
When /vibe is invoked:
VALIDATION-REPORT.md → stage 1 donedocs/superpowers/specs/*-design.md → stage 2 donedocs/PRD.md → stage 3 donedocs/superpowers/plans/*.md → stage 4 doneHARNESS-STATE.md with COMPLETE or user-stopped → stage 5 donePresent this menu to the user:
/vibe
Pipeline: <project-name or "New Project">
Status: <current state summary>
1. Validate [<status>]
2. Brainstorm [<status>]
3. Vibe Prep [<status>]
4. Plan [<status>]
5. Build [<status>]
6. QA + Design [<status>]
7. Roast [<status>]
8. Ship [<status>]
9. Monitor [<status>]
Status key: [done] [in progress] [pending]
> Enter stage number, or press Enter to <suggested action>:Suggested action logic:
in progress: "continue stage N"When user selects a stage, update VIBE-STATE.md to mark it in_progress, then execute that stage's process.
When no VIBE-STATE.md exists, create it at the project root:
# Vibe Pipeline State
## Project: <ask user for project name>
## Started: <today's date>
## Stages
| Stage | Status | Completed | Notes |
|-------|--------|-----------|-------|
| 1. Validate | pending | — | — |
| 2. Brainstorm | pending | — | — |
| 3. Vibe Prep | pending | — | — |
| 4. Plan | pending | — | — |
| 5. Build | pending | — | — |
| 6. QA + Design | pending | — | — |
| 7. Roast | pending | — | — |
| 8. Ship | pending | — | — |
| 9. Monitor | pending | — | — |
## Roast Loops: 0
## Current Stage: —
## Next Suggested: Start stage 1After each stage transition:
pending — not startedin_progress — currently activecompleted — finishedskipped — user chose to skipPurpose: Kill bad ideas early by merging YC-style forcing questions with structured validation.
Skills used: gstack-office-hours + validate-idea
Invoke the gstack-office-hours skill using the Skill tool in startup/builder mode. This covers:
Invoke the validate-idea skill using the Skill tool. This covers:
Combine outputs from both into a single report at the project root. Include: GO / PIVOT / NO-GO verdict.
completed.Purpose: Turn the validated idea into a design spec with multiple approaches explored.
Skills used: superpowers:brainstorming
This will:
docs/superpowers/specs/YYYY-MM-DD-<topic>-design.mdcompleted. Add note with spec file path.Note: The brainstorming skill normally transitions to writing-plans. In this pipeline, we return to the menu instead so stage 3 (Vibe Prep) runs before stage 4 (Plan). When invoking brainstorming, after the spec is written and approved, do NOT let it invoke writing-plans. Return to the /vibe menu.
Purpose: Create PRD, UI design, architecture docs, and scaffold the project.
Skills used: vibe-prep (modified flow)
VALIDATION-REPORT.md. Start from vibe-prep's Step 2 (Tech Stack Selection).docs/PRD.md (step 3)docs/UI-DESIGN.md (step 4)docs/ARCHITECTURE.md (step 5)CLAUDE.md (step 7)docs/REFERENCE.md (step 8)docs/QUALITY-GATES.md (step 9)completed.Purpose: Create a detailed, bite-sized implementation plan with TDD steps.
Skills used: superpowers:writing-plans
Provide context:
docs/superpowers/specs/*-design.mddocs/PRD.mddocs/ARCHITECTURE.mddocs/QUALITY-GATES.mddocs/superpowers/plans/YYYY-MM-DD-<feature>.mdcompleted. Add note with plan file path.Purpose: Autonomous 15+ cycle build loop with TDD and code review injected every cycle.
Skills used: vibe-harness + superpowers:test-driven-development + superpowers:requesting-code-review
The standard vibe-harness Generator writes code freely. In this pipeline, the Generator MUST follow TDD discipline:
Enhanced Generator Phase (per cycle): a. Read the implementation plan from stage 4 to identify the next task/feature. b. RED: Write a failing test for the feature first. Run it. Confirm it fails. c. GREEN: Write the minimal implementation to make the test pass. Run it. Confirm it passes. d. REFACTOR: Clean up while keeping tests green. e. Commit the code.
Code Review Phase (per cycle, after Generator): f. Dispatch a code-reviewer subagent using superpowers:requesting-code-review. g. The reviewer checks the cycle's diff for quality, security, and spec compliance. h. If reviewer raises CRITICAL or HIGH issues: Generator fixes them before the Evaluator runs. i. If only MEDIUM or LOW issues: note them, proceed to Evaluator.
Evaluator Phase: Unchanged from standard vibe-harness. Scores on 5 dimensions.
completed.Purpose: Browser-based QA testing and visual polish of the built MVP.
Skills used: gstack-qa + gstack-design-review
package.json or project docs for the start command.Invoke gstack-qa using the Skill tool. This will:
Invoke gstack-design-review using the Skill tool. This will:
completed.Purpose: Stress-test with AI personas. Auto-loop back to build if score is low.
Skills used: roast-mvp
Default to gauntlet mode (VC gate → community gate).
looped_back, stage 5 as in_progress.completed.Purpose: Create PR and deploy to production.
Skills used: gstack-ship + gstack-land-and-deploy
Invoke gstack-ship using the Skill tool. This will:
Show the PR link. Ask: "PR created. Ready to deploy? (y/n)"
completed (PR created but not deployed). User can deploy later.Invoke gstack-land-and-deploy using the Skill tool. This will:
gstack-setup-deploy first.completed. Add note with PR URL and deploy status.Purpose: Continuous post-deploy health monitoring until manually stopped.
Skills used: gstack-canary + /loop
Invoke gstack-canary using the Skill tool, wrapped in a /loop for continuous execution.
Use the Skill tool to invoke loop with args: 5m gstack-canary
This will:
"Canary monitoring is running continuously every 5 minutes. You'll be alerted if any issues are detected. To stop monitoring, use /loop stop."active (not completed — it runs until stopped). /vibe pipeline complete!
Project: <name>
Stages completed: 9/9
Roast loops: <N>
Final roast score: <score>
PR: <url>
Deploy: <status>
Monitoring: active (stop with /loop stop)~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.