Access and authorization
Routes, handlers, policies, and flows where a generated change can bypass a role or user check.
VS Code extension
The extension sends checks to app.highvibe.dev so developers can review risky AI-assisted coding and vibe coding changes before commit, pull request, or release.
Russian is the primary language. Русская версия: HighVibe для VS Code.
Built for modern code review
HighVibe is not a generic linter. It looks for practical risk in code generated or accelerated by AI assistants.
Routes, handlers, policies, and flows where a generated change can bypass a role or user check.
Tokens, local URLs, unsafe defaults, and configuration drift that should not be shipped.
Semgrep and Gitleaks can run as shadow-mode inputs first: visible for evaluation, but not allowed to block real checks until proven useful.
Setup
HighVibe: Set Plugin Token in VS Code.Data
The extension sends the check payload needed for review: changed code context, file paths, workspace metadata, and the plugin token used for authentication. The default service URL is https://app.highvibe.dev/.
If checks do not arrive, follow the troubleshooting steps in the documentation and include the HighVibe Output channel when contacting support.