Vibe-Coded PR Security Auditor

Audits AI-generated pull requests (Claude Code, Cursor, Copilot, Codex, Cline output) for OWASP Top 10 vulnerabilities, slopsquatting / hallucinated dependencies, silent scope drift, fabricated APIs, and the 'almost right' failure modes documented in the 2026 vibe-coding trust paradox — produces a merge-gate report with prioritized findings, concrete patches, and a signed reviewer checklist so teams can keep AI-generated code out of production without blocking the flow