What are the prerequisites for running VibeShift?
Python 3.10+, an LLM API key (Gemini 2.0 Flash works well), the MCP package installed (`pip install mcp[cli]`), and Playwright browsers installed (`patchright install --with-deps`).
@Ilikepizza2
基本信息
[MCP Server] The Security Agent for AI assisted coding
使用下面的配置,将此服务器添加到你的 MCP 客户端。
{
"mcpServers": {
"GroundNG-Web-Tester": {
"command": "uv",
"args": [
"--directory",
"path/to/cloned_repo",
"run",
"mcp_server.py"
]
}
}
}工具列表暂未提供
当前收录暂时没有可展示的工具列表,不代表服务没有工具。请查阅项目文档了解支持的能力。
工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。
VibeShift is a security agent that integrates with AI coding assistants via the Model Context Protocol (MCP). It analyzes code generated by AI, identifies vulnerabilities, and facilitates AI-driven remediation before insecure code reaches the codebase. It is designed for developers using tools like Cursor, GitHub Copilot, or Claude Code.
Install Python 3.10+, clone the repository, create a virtual environment, install dependencies with pip install -r requirements.txt, and install Playwright browsers with patchright install --with-deps. Rename .env.example to .env and add your LLM API key. Add the MCP server configuration to your AI assistant's MCP config. Then interact with VibeShift through natural language commands via your AI coding assistant.
Python 3.10+, an LLM API key (Gemini 2.0 Flash works well), the MCP package installed (`pip install mcp[cli]`), and Playwright browsers installed (`patchright install --with-deps`).
Rename the `.env.example` file to `.env` in the project root and add your LLM API key under the `LLM_API_KEY` variable.
VibeShift uses Semgrep for static code analysis (SAST) and Nuclei for template‑based dynamic scanning (DAST). It also leverages Playwright for browser automation.
Recorded tests are saved as JSON files in the `output/` directory. Execution results are returned to the AI assistant and also saved to `output/execution_result_....json`. Discovery results are saved to `output/discovery_results_....json`.
Yes, it supports UI tests not natively supported by Playwright, such as checking if text is overflowing in a div.
Hindsight: Agent Memory That Learns

A good sequence diagram can solve almost any communication problem in engineering. Volley lets your agent write them as plain text, with the real request and response payloads on every arrow. It checks its own syntax wi

Health by Dr Brad works out a health plan from your own results: which screening is due at your age, and evidence-based suggestions, each with the reason and the published guideline or study behind it. Your record is one

Request dedicated senior developers to work on your project, write job descriptions, and prep technical interviews — all without leaving your Claude chat. Just describe what you need, and Lemon.io MCP does the rest. 1–3
This open-source curriculum introduces the fundamentals of Model Context Protocol (MCP) through real-world, cross-language examples in .NET, Java, TypeScript, JavaScript, Rust and Python. Designed for developers, it focuses on practical techniques for building modular, scalable,
评论