Secure Your App

Scan the code, fix what it finds, then check what scanners miss before launch.

You start withAn app built with AI tools, a few days from launch

You end withA ranked list of what is left to fix before launch, with the code changes and dashboard checks

Step 1

Use Snyk

Scans your source code for known security flaws and saves each one with its file and line.

Save it as snyk-code.json. In the project folder run snyk code test --json-file-output=snyk-code.json and give the file to your agent.

Step 2

Give your agent the Security and Hardening skill

Has your agent map where outside data gets in, fix each issue and audit your packages.

The skill is in this folder, at skill/security-and-hardening. Copy it into your agent's skills folder, or install it from its maker:

npx skills add addyosmani/agent-skills --skill security-and-hardening

Save it as threat-model.md. Paste threat-model.md into {{What the app does, its users, data and stack}}; a coding agent reads the repo for {{Code to check}}.

Step 3

Run the Security Check for Vibe-Coded Apps prompt

Looks for what scanners miss, such as open tables and missing ownership checks, and ranks it.

What the app does, its users, data and stackCode to check

A coding agent that reads the whole repository, such as Codex or Claude Code, fits best; a chat assistant only sees the files you paste.