I looked at the code and the documentation and it's definitely vibe coded. Also the presence of CLAUDE.md is pretty telling. I have no issue with vibe coding in general, but I am skeptical of the usefulness of LLMs with security code.

Yes, I think projects that are coded wholly or in part by LLMs should be noted as such.

Why would you trust a random person's project anymore than an AI project? I'd say the vast majority of the population is vastly less skilled than Claude Code.

I.e. just because it's human doesn't mean it's any more secure.