Secure before you ship
A launch-check skill and always-on security rules that catch leaked keys, open databases and missing auth before your vibe-coded app goes live.
- 2 2 Rules
- 1 1 Skills
- – 0 MCP
These loadouts cover JavaScript work where there is no compiler to catch mistakes: Chrome extensions under Manifest V3, with minimal permissions and a skill for getting through Chrome Web Store review; a launch check that catches leaked keys, open databases and missing auth before your app goes live; and Playwright tests that drive a real Electron app and fail if its security settings slip.
Every one installs for Claude Code, Codex CLI, Cursor, Gemini CLI, Antigravity CLI and GitHub Copilot unless its card says otherwise.
A launch-check skill and always-on security rules that catch leaked keys, open databases and missing auth before your vibe-coded app goes live.
Manifest V3 rules for service workers, messaging and minimal permissions, plus a skill that gets your extension through Chrome Web Store review.
Playwright tests that drive the real Electron app: secure webPreferences, no Node in the renderer, IPC round trips, input validation and blocked navigation.
Looking for something narrower? Search within JavaScript or filter everything.