Audit from the terminal.
One command.
No browser. No account. No setup. Paste a URL and get a full pre-launch report directly in your terminal.
What the output looks like
Color-coded by severity. Evidence for every failure. Direct fix suggestions. Full report link at the bottom.
❯ npx vibecheck-audit https://podbright.ai
Starting audit for https://podbright.ai …
Running checks … 61s elapsed
────────────────────────────────────────────────────
VibeCheck — https://podbright.ai/
────────────────────────────────────────────────────
Score: 98/100 — Ship it
Checks: 153 run ✓ 75 passed ✗ 2 failed ⚠ 33 warned – 43 skipped
────────────────────────────────────────────────────
HIGH (1)
[sec-001] Content-Security-Policy header missing
Found: Content-Security-Policy header missing
Fix: Add a CSP header to prevent XSS. Start with a restrictive policy and loosen as needed.
MEDIUM (1)
[seo-003] Missing Open Graph image
Found: No og:image meta tag found
Fix: Add <meta property="og:image" content="https://..."> with a 1200×630px image.
WARNINGS (33)
[api-002] CORS wildcard header present
Found: CORS wildcard detected in network requests
[api-004] No rate limiting headers on API responses
Found: No rate-limit headers detected on API responses
[auth-010] Protected routes accessible via direct URL
Found: /settings returned 200 without apparent auth check
… 30 more warnings in full report
PASSED (75 checks)
auth-001 auth-002 seo-001 seo-002 mob-001 mob-002 perf-001 sec-002 …
────────────────────────────────────────────────────
Full report: https://vibecheck.builtthisweekend.com/audit/clx…
────────────────────────────────────────────────────
❯ █
Commands
No install required. npx downloads and runs the latest version every time.
npx vibecheck-audit https://yourapp.comRuns all checks, returns Vibe Score + prioritized issue list.
npx vibecheck-audit https://yourapp.com --category securityRuns only one category. Faster — about 90 seconds.
npx vibecheck-audit https://yourapp.com --fail-below 70Exits with code 1 if score drops below threshold. Blocks the pipeline.
npx vibecheck-audit https://yourapp.com --format json | jq '.score'Raw JSON for scripting, logging, or piping into other tools.
All flags
| Flag | Values | Description |
|---|---|---|
| --category | auth, security, ai, payments, seo, legal, content, frontend, mobile, performance, database, api, production, observability, launch | Run only one category |
| --fail-below | 0–100 | Exit with code 1 if Vibe Score is below this number |
| --format | text (default), json | Output format |
| --help | — | Show help |
| --version | — | Show version |
Four ways to use VibeCheck
All four run the same checks. Pick whichever fits your workflow.
One command. Full audit. No account.
Works on any publicly reachable URL. Results in under 5 minutes.
npx vibecheck-audit https://yourapp.com