A secure, legally-complete Next.js starter you drive with Claude Code, Codex, or any coding agent — it interviews you about your idea and scaffolds only the parts you need.
Run it in Claude Code and the /vibe-starter skill interviews you,
then scaffolds a tailored, secure app. Use Codex or any other agent and the
same guardrails drive the vibe CLI.
Every scaffold starts here: hardened, accessible, themed, with GDPR/CCPA pages and a compliant consent banner already wired in.
Nonce-based Content Security Policy, hardened headers, and Zod-validated inputs wired in before you write a line.
GDPR / CCPA privacy, terms, and cookie pages with an equal-weight consent banner — matched to the data you collect.
A secure base plus a registry of 20 modules the scaffolder pulls in on demand — auth, payments, AI, and more.
Keep building by describing features in plain English while the guardrails keep the code production-ready.
Env vars validated at build time; server secrets can never reach the client bundle.
Strict TypeScript, ESLint, Prettier, secret scanning, and CI running on every push.
Copied into your repo shadcn-style — real source, no hidden framework. Pick
one db and one auth, add the rest as you grow.
git clone the repo, pnpm install, and you have a
secure, deployable app.
Run /vibe-starter in Claude Code — or point any agent at
AGENTS.md — and answer a few questions.
It installs the right modules, generates your legal pages, and leaves you a running app. Deploy to Vercel.
Free and open source under MIT. Clone it, star it, make it yours.