AISlop, a CLI for catching AI generated code smells
Catches AI slop patterns like empty catches and narrative comments that tests and lint miss.
ESLint for AI slop. Detect AI-generated code smells in your JS/TS and Python codebase.
Catches AI code smells ESLint misses: empty catches, hardcoded secrets, god functions.
Developers using AI coding assistants
CodeRabbit · ESLint · SonarQube
24 rules across JS/TS and Python. Zero config, runs offline, regex-based so it's fast.
npx @yuvrajangadsingh/vibecheck .
Also ships as a GitHub Action for inline PR annotations and standalone binaries (no Node required).Why: CodeRabbit found AI-generated PRs have 1.7x more issues than human PRs. Veracode says 45% of AI code samples have security vulnerabilities. "Vibe coding" is everywhere now but nobody's linting for the patterns it produces.
This isn't a replacement for ESLint. It catches things ESLint doesn't look for, like catch blocks that only console.error without rethrowing, bare except: pass in Python, or mutable default arguments.
Catches AI slop patterns like empty catches and narrative comments that tests and lint miss.
Catches architectural erosion that Ruff and Semgrep miss entirely.
Lint-time DataFrame checking when Pandera only validates at runtime.
AST-level regex analysis with auto-fix beats string-based ReDoS checkers.
AI-specific linting catches hallucinated packages; but static analysis won't catch logic gaps reliably.
Catches .pth injection vectors from the litellm attack when Snyk and Dependabot miss them.