VibeShift

概述

VibeShift 无缝集成 Cursor、GitHub Copilot 和 Claude Code 等 AI 编码助手，提供自动化安全分析。它使用 Semgrep 等静态分析工具识别 AI 生成代码中的漏洞，并促进 AI 驱动的修复。该服务器还支持使用 Playwright 进行自动化测试录制和执行，创建安全反馈循环，帮助开发人员在代码进入代码库之前发现并修复安全问题。VibeShift 代表了 AI 编码环境的左移安全方法。

试试问 AI

装完之后，这里有 5 个你可以让 AI 做的事：

• get_security_scan

  Perform security analysis on code using static analysis tools like Semgrep.

  试试:Analyze this function for security vulnerabilities.试试:Check the Python code Copilot just wrote for SQL injection.试试:Secure the generated code with VibeShift before committing.
• record_test_flow

  Record a Playwright-based test script from natural language descriptions.

  试试:Record a test: go to https://example.com/login, type 'user' into username, click submit button.试试:Record a test for the login flow on our staging environment.
• run_regression_test

  Execute a recorded JSON test file using Playwright.

  试试:Run the regression test `output/test_login.json`试试:Execute the test that was recorded yesterday for the checkout flow.
• discover_test_flows

  Crawl websites and suggest test steps using LLM analysis.

  试试:Discover potential test steps starting from https://practicetestautomation.com/practice/试试:What test cases should we write for the admin dashboard at https://admin.example.com?
• list_recorded_tests

  List available recorded test JSON files in the output directory.

  试试:List the available recorded web tests.试试:Show me all the test scripts we've recorded so far.

可对比工具

安装

{
  "mcpServers": {
    "VibeShift":{
      "command": "uv",
      "args": ["--directory","path/to/cloned_repo", "run", "mcp_server.py"]
    }
  }
}

FAQ

VibeShift 支持 AI 编码助手？

VibeShift 通过 MCP 集成支持 Cursor、Windsurf、GitHub Copilot 和 Roo Code。

VibeShift 使用哪些安全工具？

它使用 Semgrep 进行静态分析（SAST），并可以集成 Nuclei 或 ZAP 进行动态分析（DAST）。

Hacker News 讨论

开发者社区最近的相关讨论。

• Show HN: VibeShift MCP – Getting secure working code from AI▲ 2
  帖子 by Ilikepizza2 · 2025-05-19

VibeShift 对比