Ha

Hackmenot – Security scanner for AI-generated code

Hacker News

Hackmenot – Security scanner for AI-generated code

Hey HN! I built hackmenot because I kept seeing the same security vulnerabilities in AI-generated code. The problem: AI assistants optimize for "code that works," not "code that's secure." They routinely generate SQL injection via f-strings, hardcode API keys, use os.system() with user input, and pick weak crypto like MD5. What hackmenot does: - 100+ rules purpose-built for AI code patterns - Python, JavaScript, Go, Terraform - Auto-fix mode (hackmenot scan . --fix) - Detects hallucinated packages (dependencies AI made up that don't exist) - Sub-second scans with caching - GitHub Action with SARIF support Install: pip install hackmenot It's Apache 2.0, no API keys needed, works offline. Would love feedback on the rules coverage and any patterns I'm missing. Happy to answer questions!

Share card

Actual performance

1points
Did not reach leaderboard

Launch Intel predictions

Analyze your own launch →
Product HuntOn track for Day 1 leaderboard · Strong signals: user, code · Missing: mac, agents, macos
87%87% predicted probability of success on Product Hunt, based on ML models trained on real launch data.
best fitHighest predicted score across all platforms for this description.
Indie HackersFits the IH revenue-focused audience · Missing: supports, reddit linkedin, podcasting
75%75% predicted probability of success on Indie Hackers, based on ML models trained on real launch data.
TrustMRRLess likely to generate early MRR · Strong signals: scanner · Missing: mobile apps, ios, personal
45%45% predicted probability of success on TrustMRR, based on ML models trained on real launch data.
Hacker NewsMay not resonate with HN audience · Strong signals: exist, io · Missing: https docs, excited, just released
35%35% predicted probability of success on Hacker News, based on ML models trained on real launch data.
nativeThis product was originally launched on this platform.
AppSumoMay struggle as an AppSumo deal · Missing: plus, platform, intuitive
30%30% predicted probability of success on AppSumo, based on ML models trained on real launch data.
Acquire.comPre-revenue stage for this audience · Missing: arr, mrr, revenue
20%20% predicted probability of success on Acquire.com, based on ML models trained on real launch data.
BetaListMay not resonate with beta-testers · Strong signals: crypto · Missing: web3, chat, cryptocurrency
0%0% predicted probability of success on BetaList, based on ML models trained on real launch data.

Correct prediction on native model

Similar products

codecop
codecop65%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Security scanner for AI-generated code

Indie Hackers1$38/moai
VibeCheck
VibeCheck40%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Security scanner for AI-generated code - find vulnerabilitie

Indie Hackers1ai
Se
Security Cards – Reducing insecure AI-generated code by 72%38%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Security Cards – Reducing insecure AI-generated code by 72%

Hacker News4
Vi
VibeGuard – security linter for AI-generated code42%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

VibeGuard – security linter for AI-generated code

Hacker News1
AI
AISlop, a CLI for catching AI generated code smells38%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

AISlop, a CLI for catching AI generated code smells

Hacker News73
gait
gait72%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Git-Blame for AI-Generated Code

Product Hunt+168Software Engineering
Au
Audit AI Generated Code with Go Std Lib38%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Audit AI Generated Code with Go Std Lib

Hacker News1
MergeShield
MergeShield23%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Govern AI-generated code before it ships

Indie Hackerscommitment-full-time
DiffSentry
DiffSentry32%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Catch risky AI-generated code before it hits production

Indie Hackers1$500/moproductivity
De
Deff – Review AI-generated code changes26%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Deff – Review AI-generated code changes

Hacker News1