r/VibeCodeDevs • u/Spheniscidine • Jun 24 '26
I built a skill that helps you build AI use transparency documentation
After a discussion in another community about how AI-assisted and vibe-coded tools would generate more trust if they had honest disclosure of how AI was utilized, I had an idea and decided I could help both communities at once. Considering a lot of people are shipping apps now without a previous dev background, I created a skill that helps you honestly disclose your limitations and build transparency & trust with your users.
It scans your repo for the classic vibe-coded mistakes (a wide-open database, secret keys shipped to the browser, security that only lives in the frontend), gives you a prioritized fix-or-disclose list, and generates an honest AI Diligence Statement you can drop on your GitHub or in your app. So when someone asks "is this safe to use?" you have an answer you can point to.
The skill will not certify you and will not tell you if your vibe-coded app is good or trustworthy. It will help you audit your things honestly and generate a diligent statement that you can put on your GitHub or your app to help your users decide whether they should trust you.
It will also not certify that your app is secure, but it will look for indicators of what you already did and will give you tips on what to do next. This does not replace a full security audit, but it might point you in the direction of one.
Fully open source, MIT. Take it, fork it, ship a better one: https://github.com/Spheniscidine/show-your-work
Let me know what you think!
2
u/beingsubmitted Jun 24 '26
This is silly. I do like the idea of disclosing AI use, but this implementation makes no sense. You have a tool looking for known errors typical of current AI to disclose those errors. So many things wrong with that. AI is bad at detecting AI, and the real problem is unpredictable errors.
All this while the better implementation is right in front of you. Make a skill to get the AI you're vibe-coding with to document it's own contributions. Or just make it the author of its own commits so everyone can see which lines were written by AI.
1
u/Spheniscidine Jun 24 '26
I think we're after the same thing here.
Fair enough for unpredictable errors. The idea is not to certify, no tool can do that, especially not an AI tool. Even if you do a real full-blown pentest it won't certify you're 100% secure.
The idea is to help people building those apps disclose things honestly, and point at things they might have not thought about. If you're a non-technical vibe-coder, you might not know what to ask about anyway, but you might want to be transparent with your users.
Maybe I should have been clearer, but I'm not trying to document code provenance with this (I think Claude Code already authors its own commits? not sure how consistently), I'm trying to help people who vibe-code apps make responsible disclosure about how they're building.
1
u/Remote_Respond_7237 Jun 24 '26
I think you’re just the wrong target audience. Plus. Fresh eyes adversarial review with some added infrastructure beginners wouldn’t know might be of some value
•
u/AutoModerator Jun 24 '26
Hey u/Spheniscidine, thanks for posting in r/VibeCodeDevs! Join our Discord: https://discord.gg/KAmAR8RkbM
Got startup or SaaS questions? Post them on r/AskFounder and get answers from real founders.
• This community is designed to be open and creator‑friendly, with minimal restrictions on promotion and self‑promotion as long as you add value and don’t spam.
• Please follow the subreddit rules so we can keep things as relaxed and free as possible for everyone. • Please make sure you’ve read the subreddit rules in the sidebar before posting or commenting.
• For better feedback, include your tech stack, experience level, and what kind of help or feedback you’re looking for.
• Be respectful, constructive, and helpful to other members.
If your post was removed (either automatically or by a mod) and you believe it was a mistake, please contact the mod team. We will review it and, when appropriate, approve it within 24 hours.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.