Stay within your authority.
Only provide repositories, websites, credentials, or data that you are authorized to use for the requested checks. Do not use the service to probe unrelated third parties or expand a test beyond its agreed scope.
Protect real people and services.
Do not submit stolen credentials, sensitive customer records, or payment details. Data-changing journeys need synthetic test data and sandbox services. Do not use testing to spam, disrupt, or damage another service.
Respect execution boundaries.
Do not attempt to escape isolation, access other workspaces, extract service credentials, bypass budgets, or use the Review environment as a general-purpose compute service.
Report a problem responsibly.
If you find a vulnerability in VibeCheck itself, contact support@vibecheck-ai.com with a concise description and safe reproduction steps. Do not include live secrets or other people’s private information.