GitClear data: ~45% of AI-generated code has at least one security issue. The fix isn't "stop using AI", it's adding a security pass to every PR before merge. Read your dependencies, check for hardcoded secrets, run a free SAST scanner like Semgrep or GitHub's CodeQL once a week. The Moltbook breach (1.5M tokens leaked 3 days after launch) was a missing env var check a human would have caught in 30 seconds.
Do a security pass on this change before I merge. Check for hardcoded secrets or API keys, missing env-var validation, unsafe handling of user input, and dependencies with known vulnerabilities. List each issue with file and line, rate it by severity, and show the minimal fix. Change nothing else.