← All tools
Private Everything runs in your browser. No uploads, no tracking, no signup./ zero data collected
Tools / 07 · AI Code Security Checklist
AI Code Security Checklist
AI code looks confident but often ships injection, hardcoded secrets, and missing auth checks. Pick your stack and get the checklist that matters.
AI-generated code repeatedly fails on the items below. Tick what you have verified before shipping.
Frequently asked questions
- Is this a real security scanner?
- No. It is an educational checklist of the pitfalls most often found in AI-generated code. For production, run a real SAST/DAST tool and a proper audit.
- Why is AI code especially risky?
- Models optimize for code that runs and looks right, not for security boundaries. They routinely emit injection-prone queries, hardcoded keys, and missing auth checks.
- Should I bake these into CLAUDE.md?
- Yes. Listing "never hardcode secrets, always parameterize queries" as a project rule prevents the mistake at generation time instead of catching it later.