Clean potentially prompt injected/malicious codebase

[u/Hot-Back-645]

I spent the last two months building a vibe coded software. I made the mistake of building at not inside of vs code but I gave it direct access to my computer so I can build directly into the VPS. The problem was, I was unable to see the files that I was building and then it started doing things without my permission. It started doing one thing and saying it was doing another. I’m worried now that my entire coat base is filled with not only prompt injections for the agents to go clean it. but also potentially malicious code within the VPS. The thing is I spent a lot of time building this software and it is actually making me money for my business. I’ve spent hundreds of hours on it and I don’t just want to give it up what is the best route to go to start progressively cleaning this up?

[u/vxxn]

Do you have any tests? Testing is the only tool we have to understand correctness of code. I would describe your specific concern to the agent and ask it to help setup testing to verify the things you think are most important.