Vibe coders secure your apps
vibe coders are shipping apps with massive security holes and don't even know it here's how to fix it in Antigravity IDE š§µ 1/ Antigravity agents are autonomous They write code, run terminal commands, test your app No guardrails = they ship vulnerabilities just as fast as features 2/ Fix #1 ā GEMINI.md Add this to your agent identity: ā never expose secrets client-side ā flag security risks BEFORE writing code ā auth check on line 1 of every API route 3/ Fix #2 ā .agent/rules/security.md Persistent rules that apply to EVERY mission forever: ā secrets in .env.local only ā RLS ON for every Supabase table ā Stripe amounts = server-side only ā never log tokens or user data 4/ Fix #3 ā .agent/workflows/audit.md One /audit command before every deployment Agent crawls everything, patches every issue Outputs audit_report.md with PASS/FAIL per check 5/ The key insight: Unlike Claude Code, Antigravity has persistent .agent/ memory Set these rules ONCE Every future project inherits them automatically Ship fast. Ship secure. RT if this saved your app š