VibeShift

Overview

VibeShift integrates seamlessly with AI coding assistants like Cursor, GitHub Copilot, and Claude Code to provide automated security analysis. It uses static analysis tools like Semgrep to identify vulnerabilities in AI-generated code and facilitates AI-driven remediation. The server also supports automated test recording and execution using Playwright, creating a security feedback loop that helps developers catch and fix security issues before they enter the codebase. VibeShift represents a shift-left security approach for AI-assisted coding environments.

Try asking AI

After installing, here are 5 things you can ask your AI assistant:

• get_security_scan

  Perform security analysis on code using static analysis tools like Semgrep.

  Try:Analyze this function for security vulnerabilities.Try:Check the Python code Copilot just wrote for SQL injection.Try:Secure the generated code with VibeShift before committing.
• record_test_flow

  Record a Playwright-based test script from natural language descriptions.

  Try:Record a test: go to https://example.com/login, type 'user' into username, click submit button.Try:Record a test for the login flow on our staging environment.
• run_regression_test

  Execute a recorded JSON test file using Playwright.

  Try:Run the regression test `output/test_login.json`Try:Execute the test that was recorded yesterday for the checkout flow.
• discover_test_flows

  Crawl websites and suggest test steps using LLM analysis.

  Try:Discover potential test steps starting from https://practicetestautomation.com/practice/Try:What test cases should we write for the admin dashboard at https://admin.example.com?
• list_recorded_tests

  List available recorded test JSON files in the output directory.

  Try:List the available recorded web tests.Try:Show me all the test scripts we've recorded so far.

Comparable tools

Installation

{
  "mcpServers": {
    "VibeShift":{
      "command": "uv",
      "args": ["--directory","path/to/cloned_repo", "run", "mcp_server.py"]
    }
  }
}

FAQ

Which AI coding assistants does VibeShift support?

VibeShift supports Cursor, Windsurf, GitHub Copilot, and Roo Code through MCP integration.

What security tools does VibeShift use?

It uses Semgrep for static analysis (SAST) and can integrate Nuclei or ZAP for dynamic analysis (DAST).

On Hacker News

Recent discussion from the developer community.

• Show HN: VibeShift MCP – Getting secure working code from AI▲ 2
  Story by Ilikepizza2 · 2025-05-19

Compare VibeShift with