VibeSec

VibeSec is a robust security firewall designed to safeguard AI coding agents like Claude Code, Cursor, and Codex from executing harmful commands and accessing sensitive information. It acts as a critical intermediary between AI systems and local machines, ensuring that potentially dangerous actions are evaluated and either permitted, blocked, or require human approval before execution.

Key Features:

• Deterministic Policy Enforcement: Every action requested by an AI agent is evaluated by a deterministic policy engine, ensuring that all operations are thoroughly vetted.
• Comprehensive Protection: Prevents scripts from accessing sensitive files (e.g., .env), executing destructive commands (e.g., rm -rf), and making unauthorized Git operations.
• Audit Logging: Maintains a detailed audit ledger that records all actions, with sensitive information scrubbed before logging, thus preventing potential leaks.
• Intuitive Command Structure: Users can easily initialize VibeSec in any project, run commands through the policy engine, and review decision trails.

How It Works:

VibeSec operates a two-tier evaluation system:

1. Policy Engine: Configurable policies determine which actions are allowed, asked for approval, or blocked outright based on predefined rules.
2. Risk Engine: Assesses the risk associated with each action request, providing a score that influences the final decision.

Example Command Usage:

$ vibesec init  # Initialize VibeSec in the current directory
$ vibesec exec "node -v"  # Executes a safe command
$ vibesec exec -r .env  # Attempts to read a sensitive file (will be blocked)
$ vibesec exec "rm -rf /"  # Attempts a destructive command (will be blocked)

Project Status:

Currently in Alpha, VibeSec proves to be a reliable tool for developers aiming to automate their workflows while safeguarding against potential risks posed by AI coding agents. Contributions to enhance functionality and expand its policy framework are welcomed and actively encouraged through the GitHub repository.

For more information and to see VibeSec in action, refer to the documentation. Use VibeSec to ensure that your development environment remains secure even in the face of powerful AI tools.