AI Coding Assistant Criticism Scanner - Detects vibe coding anti-patterns in AI-generated code
npm install vibechck> AI Coding Assistant Criticism Scanner
> _Ensure your codebase passes the vibe check._
vibechck is a static analysis tool designed specifically to detect anti-patterns, hallucinations, and "lazy" coding practices often introduced by Large Language Models (LLMs) and AI coding assistants.
- 👻 Hallucination Detection: Finds phantom dependencies, "newborn" packages (supply chain risk), and typosquatting attempts.
- 😴 Laziness Linter: Catches "lazy" AI patterns like // ... rest of code, hollow functions, mock implementations, and unlogged errors in catch blocks.
- 🔒 Security Sentinel: Detects hardcoded secrets, dangerous deserialization patterns, insecure JWT usage, and hardcoded production URLs.
- 🏗️ Architecture Scanner: Identifies "God functions", circular dependencies, and unused exports.
- 👁️ Observability Checks: Flags unlogged errors and missing error tracking services (Sentry, LogRocket, etc.).
- 💸 Cost Detection: Identifies expensive API calls (OpenAI, Anthropic, Cloudinary) in loops without rate limiting or caching.
- 🛡️ Environment Safety: Detects destructive operations without environment guards and hardcoded production URLs.
To use vibechck in your project, install it via npm:
``bash`
npm install --save-dev vibechckOR
npx vibechck
`bash`
npx vibechck
`bashScan a specific directory
npx vibechck ./src
🔌 Integration Guide
$3
Ensure every PR passes the vibe check before merging.yaml
name: Vibechck
on: [push, pull_request]jobs:
vibechck:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
- name: Install dependencies
run: npm ci
- name: Run Vibechck
run: npx vibechck --severity=critical,high
`$3
Use to prevent committing "lazy" code.`bash
npx husky add .husky/pre-commit "npx vibechck --module=laziness"
`📝 Configuration
Create a
file in your project root to customize rules:`yaml
severity:
- critical
- high
- mediummodules:
hallucination: true
laziness: true
security: true
architecture: true
cost: true
laziness:
detectAIPreambles: true
detectUnloggedErrors: true
patterns:
- "// ... existing code ..."
ignoreRules:
magic-number:
- "tests/*/.ts"
- "examples/magic.ts"
unused-export:
- "src/api/public/**"
`$3
Vibechck supports granular ignores using glob patterns (via ). You can ignore specific rules for specific files or directories:-
**: Matches any sequence of characters (recursive).
- *: Matches any sequence of characters (single level).
- Relativity: Patterns are matched relative to the project root.$3
To prevent recursion crashes and save time, Vibechck automatically ignores the following directories by default:
- node_modules
-
-
- , build, .next, .nuxt, .output, target, vendor`