Vibe Coding Mastery

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: afrexai-vibe-coding Version: 1.0.0 The skill bundle consists of a metadata file and two markdown files (`SKILL.md`, `README.md`). The `SKILL.md` provides a comprehensive guide on 'Vibe Coding Mastery' for AI-assisted software development, covering best practices, prompt engineering, architecture, testing, and a production readiness checklist that explicitly includes security considerations. The code blocks and 'quick reference commands' within `SKILL.md` are illustrative examples of prompts or code snippets for an AI coding assistant, not direct execution instructions for the OpenClaw agent itself. The `_meta.json` explicitly states `"bins":[]`, indicating no external binaries are required. There is no evidence of data exfiltration, malicious execution, persistence, obfuscation, or prompt injection against the OpenClaw agent. External links in `README.md` are for related products/skills by the same entity.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Persistent rules can shape future AI coding sessions; if they contain unsafe instructions, stale assumptions, or sensitive information, later agents may reuse them.

Why it was flagged

The skill explicitly encourages persistent project context files that future AI coding tools may read and follow.

Skill content
Rules files teach AI your conventions once. Without them, every session starts from zero.
Recommendation

Keep rules files project-scoped, review them before reuse, avoid putting secrets or private data in them, and treat changes to these files like code changes.