Vibe App Safety Explainer
One-click scan that tells non-technical users if a Mac/desktop app behaves suspiciously
- Problem
- AI-generated desktop apps are flooding in, many with anonymous authors and thin release history, and users are afraid to install them. A Hacker News post explicitly asks how people check desktop apps for malicious code, showing real demand — but existing tools are too hardcore for average users.
- Solution
- A desktop tool for everyday users: statically and lightly dynamically scan downloaded Mac/Linux apps to detect suspicious network calls, keylogging, crypto-mining signatures, and odd file access, then translate results into 'Safe / Suspicious / Dangerous' with a plain-language explanation and a developer transparency list.
- Users
- Mac users who love trying new tools, non-professional developers downloading vibe-coded apps from GitHub, enterprise IT pre-screening staff
- MVP
- Drag-and-drop .app or .dmg to scan; check signature and notarization; list suspicious domains and file paths; output plain-language risk explanation; batch scan the Downloads folder.
- Revenue
- Free basic scan; Pro one-time purchase unlocks deep analysis, batch scanning, and report exports; API billing for security teams.
- Why now
- Rust/GPUI desktop apps and AI vibe coding exploded simultaneously, pushing non-technical users to download untrusted software, while indie devs can build a usable scanner on open-source sandboxes and static analysis.