Vibe Check — Exposed Files Scanner

One click checks the site you're on for internal files and directory listings it never meant to serve.

Vibe Check checks the website you are looking at for files that were not meant to be public. WHAT IT FINDS • Configuration files that AI coding tools keep in a project folder • Internal project documentation • Build and dependency files • Files with names that suggest credentials, and open directory listings HOW IT WORKS Click the icon and press Check. Vibe Check sends a few hundred small requests from your browser to the site and reads the scripts the page has already loaded. Red means something is public, with the exact URLs. Green means none of the checked files are. It can tell the difference between a real file and a catch-all page, so a single-page app does not show false alarms. You can download a found file, or all of them as a zip, and copy a plain-text report. If Vibe Check recognises the host, it shows the fix. PASSIVE MODE (off by default) Turn it on in settings and each new site you visit is checked once a day in the background. The toolbar badge shows the count. This asks Chrome for permission to read all sites, which a background check needs. You can turn it off at any time. PRIVACY No account, no server, no analytics. Every request goes from your browser to the site being checked and nowhere else. A file's contents are only fetched when you click Download. Any key found in a page's scripts is shown masked and never stored.