Vibefilo

Guides

Privacy and masking

Exactly what your agent sends, and how secrets stay on your machine.

Vibefilo is built so your source code never has to leave your machine. This page shows the full shape of what is sent.

What is sent

A finding
{
  "rule_id": "SECRETS_EXPOSURE",
  "severity": "blocker",
  "title": "Stripe secret key read from a public env var",
  "file": "lib/stripe.ts",
  "line": 4,
  "evidence": "process.env.NEXT_PUBLIC_STRIPE_SECRET = sk_l****"
}

Secret masking

Your agent is told to mask secret values before it submits evidence. As a second layer, Vibefilo scans every submission and masks values that look like secrets before storing them.

Your data and your rights

Read the Privacy Policy for retention and processors. To export or delete your data, email support@vibefilo.dev.