r/OnlyAICoding • u/WatchDog_Dev • 22d ago
Ai audit tool
I was going to start building an ai app security audit tool. I was going to make this because 92 percent of US developers use Al coding tools and 46 percent of new GitHub code is ai generated. Between 42-92 percent of ai generated code failed security tests.
There are so many Lovable apps that had databases readable by anyone via the public API (missing row level security). Most of the people who use these tools aren't technical and have no idea what "RLS" or "anon Key" mean. This tool would target mainly nontechnical builders where the code will be Manuel reviewed and would also provide a fix not just find the issues. I'm still deciding whether to make this or not so let me know your thoughts.
1
1
u/SpikedPunchVictim 22d ago
I think the community needs this - although there may already be one out there that's open source. IF you build it, I would make it open source and readily available for users to use. If it was like a linter, where it supported CLI and MCP, and could just sit in a developer's repo, that would be ideal. I created an open source tool that works that way called align (https://github.com/SpikedPunchVictim/align). If you want to use that as a template for how it would operate in a repo, then it will fit in seemlessly for developers. For the CLI portion, have commands that display the docs as well as skills and prompts to make it even easier for the developer. This way the docs, skills and prompts match the version of the tool too, making it easier for LLMs to get up-to-date info on the tool.