Snip
Vibe-code security gate. Real-time pre-deploy audit for AI-generated code diffs, catching leaked credentials, broken RLS, and missing security headers at the moment of generation.
01
What it does
Secret & Key Pattern Detection
Flags hardcoded API keys and token shapes for Stripe, OpenAI, Anthropic, AWS, and GitHub before commits are staged.
Supabase & DB RLS Audit
Detects missing or flawed Row Level Security (RLS) policies that inadvertently expose database tables to anonymous callers.
Web Security Headers
Verifies Content Security Policy (CSP), CORS configurations, and unauthenticated public API routes.
Ship / Fix / Block Verdict
Emits an instantaneous verdict formatted directly into the AI editor or coding agent's chat interface.
02
Distribution & Delivery
MCP Server
Exposes security linting tools directly to Cursor, Claude Desktop, Windsurf, and other Model Context Protocol clients.
GitHub Action
Automated PR gate running on pull requests to prevent AI-generated security regressions from merging.
CLI Tool
Standalone binary for local pre-commit hooks and command-line diff auditing: git diff | snip.
Cursor Skill Pack
Drop-in prompt rules and tool hooks designed specifically for Cursor Composer and agent workflows.
03
Installation
# Install Snip via the studio2201 installer:
curl -fsSL https://studio2201.com/install.sh | sh -s snip04
Terminal usage
# Audit git staging area diff
git diff --staged | snip audit
# Run as an MCP server for AI coding assistants
snip serve --mcp
# Check specific generated file or directory
snip check --path ./src/api