vibecodexray

CLI for VibeCodeXray — AI-powered codebase audits for security, code quality, and best practices.

Install

npm install -g vibecodexray

Then run vcx from anywhere. Or skip the install and use npx:

npx vibecodexray login
npx vibecodexray scan

Quick Start

vcx login        # paste your API key
vcx scan         # auto-detects repo from current directory

Usage

vcx login                     Authenticate with your API key
vcx scan <repo> [options]     Start a new audit
vcx list                      List recent audits
vcx help                      Show help

Scan Options

-b, --branch <name>    Branch to scan (default: main)
-d, --dir <path>       Root directory to scope scan
--ai                   Enable AI insights (slower)
--no-wait              Don't wait for results

Examples

# Scan a public repo
vcx scan https://github.com/user/repo

# Shorthand
vcx scan user/repo

# Auto-detect from current git repo
vcx scan

# Scan only src/ with AI insights
vcx scan user/repo -d src --ai

Authentication

Get your API key at vibecodexray.com/settings/api-keys.

# Interactive login (saves key to ~/.vcx/config.json)
vcx login

# Or use environment variable
VCX_API_KEY=vcx_... vcx scan

What it checks

• Secret exposure (API keys, tokens, passwords in code)
• Security vulnerabilities (SQL injection, XSS, auth issues)
• Dependency risks (outdated packages, known CVEs)
• Code quality (error handling, type safety, complexity)
• Performance patterns (N+1 queries, missing indexes, memory leaks)

Links

• Website
• Pricing
• Documentation