Prompt injection sinks in user-facing features
Prompt injection occurs when user-controlled text is concatenated into an LLM system prompt, allowing attackers to override instructions, exfiltrate other users' data in the context window, or cause the model to take unintended actions.
HOW VIBECHECK DETECTS THIS
vibecheck clones your repository and runs Gitleaks, Semgrep, njsscan, and a suite of custom checks targeting patterns common in AI-generated code. This check is part of the AI / LLM Apps category. When a matching pattern is found, Claude triages the finding and produces a plain-English explanation and a concrete fix — no security expertise required.
FREE SCAN
Check your repo for this and 50+ other issues
Connect GitHub → vibecheck scans for secrets, unauthenticated routes, RLS gaps, injection, and more. Claude explains every finding. Free for 2 repos.
scan my repo for free →