AI Generated Code Risks — AI skill for Claude Code
Pitfalls specific to AI-written code - hallucinated packages, insecure defaults, over-trust - and a review routine.
How to install AI Generated Code Risks
Installs to ~/.claude/skills/sammyboi81-bulwark-mcp-ai-generated-code-risks/SKILL.md
mkdir -p ~/.claude/skills/sammyboi81-bulwark-mcp-ai-generated-code-risks && curl -fsSL https://raw.githubusercontent.com/sammyboi81/bulwark-mcp/HEAD/skills/ai-generated-code-risks.md -o ~/.claude/skills/sammyboi81-bulwark-mcp-ai-generated-code-risks/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What AI Generated Code Risks does
name: ai-generated-code-risks description: Pitfalls specific to AI-written code - hallucinated packages, insecure defaults, over-trust - and a review routine. tags: ai, supply-chain, review
AI-written code is plausible, not verified. Research and incident reports show a meaningful share of generated code carries vulnerabilities, and models invent package names.
- Slopsquatting: models hallucinate dependency names; attackers register them with malware. Before adding ANY package: confirm
Alternatives in AI
- Contributing To Claude Skills Library — Thank you for your interest in contributing to the Claude Skills Library 5.3k ★
- Claude Skill Web Clone — Methodology for faithfully cloning any website (static / React / WebGL) — without copying AI-hallucinated code 969 ★
- Hol Guard — Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, M 485 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Ghostimport
👻 Detects ghost imports — npm packages that don't exist, hallucinated by AI coding tools like Cursor, Copilot
Claude Skills PDF Bulk Butler
Claude Code skills for the PDF Butler + BULK Butler Salesforce AppExchange packages — created by Claude, for C
Humanizer Academic
A Claude Code skill that removes signs of AI-generated writing from academic medical papers, making them sound
Claude Skill GPT Pro
Claude Code skill for cross-model review. One command packages files + prompt for ChatGPT Pro deep reasoning.
Harness Autonomy
Run the decidable checks an auto-merge policy can trust: block and policy rules only, no heuristics, no LLM. E
Astra Review
Send Claude-written code to GPT-6-Astra (ChatGPT, via Codex CLI) for an independent cross-provider review, the
Related Agents
Verify Dependency
STAGE 1 VERIFICATION - Fast dependency validation. Catches hallucinated packages, fake APIs, version conflicts
Appsec Secure Codegen Reviewer
Use to review AI/model-generated or newly written code for insecure-by-default patterns: injection sinks, unsa
Review Security
Reviews code changes for security vulnerabilities including injection attacks, sensitive data exposure, insecu