Show HN: AI codebase analyser and auto-fixer

Category: security

Tags: static-analysis, security, ai, python, javascript, sast, code-quality

Score: 5.7/10 (Innovation: 6, Technical: 5, Documentation: 6, Utility: 6)

getdebug is a static analysis CLI that uses deterministic regex prefilters to detect AI-specific anti-patterns in Python and JS/TS code, such as prompt injection and PII leaks, with an optional local/hosted LLM scan. It is interesting for its transparent benchmark against Bandit, Semgrep, and vulnhuntr, showing better recall on AI-app categories and lower noise on real-world code.

Target audience: Backend developers, security engineers, and DevOps working on AI-powered applications

Repository: https://www.getdebug.dev/blog/python-ai-app-prefilters

View on Hacker News