Vibe-coded on Friday. Client-editable by Monday. An AI-agent playbook + toolkit that rebuilds Lovable/v0/Bolt sites as native WordPress + Elementor — with 30+ documented gotchas.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport — counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 9da92fe · analyzer v33 · 4w ago
skills & prompt files 2
danger signals1
- dynamic code execution eval() MrCyber02-vibepress-9da92fe/scripts/extract-data.js :36
return eval('(' + body + ')');
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 11
filesystem 2
- fs (weak) MrCyber02-vibepress-9da92fe/scripts/build-elementor.js :15
const fs = require('fs'); - fs (weak) MrCyber02-vibepress-9da92fe/scripts/extract-data.js :15
const fs = require('fs');