DEV Community

CopperSunDev profile picture

CopperSunDev

Engineering notes on AI code safety, static analysis, and what scanners can and can't catch.

Location Redwood City Joined Joined on  Personal website https://coppersun.dev/ github website
Weak Crypto in AI-Generated Python

Weak Crypto in AI-Generated Python

Comments
4 min read
The Attack BrassCoders Can't Catch: Prompt Injection

The Attack BrassCoders Can't Catch: Prompt Injection

Comments
4 min read
The verify=False Pattern AI Coders Keep Shipping

The verify=False Pattern AI Coders Keep Shipping

Comments
4 min read
Feeding BrassCoders Output to Any AI Coding Assistant

Feeding BrassCoders Output to Any AI Coding Assistant

Comments
3 min read
XSS Through LLM Output: When the Model Returns JavaScript

XSS Through LLM Output: When the Model Returns JavaScript

Comments
6 min read
Weak Random Numbers in AI-Generated Python

Weak Random Numbers in AI-Generated Python

Comments
5 min read
The Vibe Coding Velocity Risk

The Vibe Coding Velocity Risk

Comments
6 min read
Scaling Vibe Coding: Why 10 Developers Need One Scanner

Scaling Vibe Coding: Why 10 Developers Need One Scanner

Comments
5 min read
Your AI Doesn't Know Your Secrets Policy

Your AI Doesn't Know Your Secrets Policy

Comments
5 min read
SSRF in AI Tool Calls: Agentic Code and Server-Side Request Forgery

SSRF in AI Tool Calls: Agentic Code and Server-Side Request Forgery

Comments
6 min read
SQLAlchemy ORM Security: The Raw Query Escape Hatch

SQLAlchemy ORM Security: The Raw Query Escape Hatch

Comments
5 min read
Building a SOC2 Audit Trail for AI-Assisted Dev

Building a SOC2 Audit Trail for AI-Assisted Dev

Comments
6 min read
Scanning AI-Generated TypeScript: What BrassCoders Finds

Scanning AI-Generated TypeScript: What BrassCoders Finds

Comments
5 min read
Path Traversal in AI-Generated File Code: The Bug That Ships

Path Traversal in AI-Generated File Code: The Bug That Ships

Comments
5 min read
OWASP LLM Top 10: A Builder's Map

OWASP LLM Top 10: A Builder's Map

Comments
6 min read
Onboarding Developers to AI-Assisted Workflows With Security Built In

Onboarding Developers to AI-Assisted Workflows With Security Built In

Comments
5 min read
Mass Assignment in AI-Generated Python APIs

Mass Assignment in AI-Generated Python APIs

Comments
5 min read
GDPR and AI-Generated Code: What Data Leaves the Machine?

GDPR and AI-Generated Code: What Data Leaves the Machine?

Comments
6 min read
Flask Security Bugs AI Coders Write — and BrassCoders Catches

Flask Security Bugs AI Coders Write — and BrassCoders Catches

Comments
6 min read
Scanning LLM Application Code: What BrassCoders Finds

Scanning LLM Application Code: What BrassCoders Finds

Comments
5 min read
Race Conditions in AI-Generated Concurrent Python

Race Conditions in AI-Generated Concurrent Python

Comments
5 min read
The AI Code Review Policy Template for Engineering Teams

The AI Code Review Policy Template for Engineering Teams

Comments
7 min read
AI Code in Regulated Industries: What NIST, CISA, and GDPR Require

AI Code in Regulated Industries: What NIST, CISA, and GDPR Require

Comments
8 min read
Agentic Code Security: What Autonomous AI Gets Wrong

Agentic Code Security: What Autonomous AI Gets Wrong

Comments
6 min read
The Unsafe-Deserialization Trio: yaml.load, pickle, eval

The Unsafe-Deserialization Trio: yaml.load, pickle, eval

Comments
4 min read
SQL Injection in AI-Generated Python: How It Ships

SQL Injection in AI-Generated Python: How It Ships

Comments
3 min read
What Your Auditor Wants From Your AI Codebase

What Your Auditor Wants From Your AI Codebase

Comments
6 min read
Five FastAPI Security Patterns AI Coders Get Wrong

Five FastAPI Security Patterns AI Coders Get Wrong

Comments
6 min read
When AI Invents Libraries: Detecting Hallucinated Imports

When AI Invents Libraries: Detecting Hallucinated Imports

Comments
6 min read
The Secrets Your AI Assistant Might Leak (And How to Catch Them)

The Secrets Your AI Assistant Might Leak (And How to Catch Them)

Comments
7 min read
What Leaves Your Machine When an LLM Reviews Your Code

What Leaves Your Machine When an LLM Reviews Your Code

Comments
4 min read
The 2026 AI-Coding Market in Five Numbers

The 2026 AI-Coding Market in Five Numbers

Comments
4 min read
AI Code Review Policy for Copilot Teams

AI Code Review Policy for Copilot Teams

Comments
7 min read
Add BrassCoders to GitHub Actions

Add BrassCoders to GitHub Actions

Comments
5 min read
Snyk vs BrassCoders: Dependency Scanning vs Source Code Scanning

Snyk vs BrassCoders: Dependency Scanning vs Source Code Scanning

Comments
5 min read
BrassCoders Research Index Is Now Public on GitHub

BrassCoders Research Index Is Now Public on GitHub

Comments
3 min read
Scanning AI-Generated JavaScript and TypeScript

Scanning AI-Generated JavaScript and TypeScript

Comments
3 min read
The Six OSS Scanners BrassCoders Runs in One Pass

The Six OSS Scanners BrassCoders Runs in One Pass

Comments
3 min read
Catching Hallucinated Imports Before pip install

Catching Hallucinated Imports Before pip install

Comments
3 min read
We Scanned 15 AI-Written Python Files: What Stuck

We Scanned 15 AI-Written Python Files: What Stuck

Comments
3 min read
Package Hallucination: The Import Your AI Invented

Package Hallucination: The Import Your AI Invented

Comments
4 min read
Why an LLM Reviewer Isn't a Security Gate

Why an LLM Reviewer Isn't a Security Gate

Comments
3 min read
How Claude Code Reads a BrassCoders Findings File

How Claude Code Reads a BrassCoders Findings File

Comments
4 min read
Hardcoded Credentials in AI-Generated Python

Hardcoded Credentials in AI-Generated Python

Comments
3 min read
What a Findings File Does That a Chat Prompt Can't

What a Findings File Does That a Chat Prompt Can't

Comments
4 min read
The False Positive Is a Feature, Not a Bug

The False Positive Is a Feature, Not a Bug

Comments
4 min read
`shell=True` in AI Python: Command Injection

`shell=True` in AI Python: Command Injection

Comments
3 min read
Why Your AI Assistant Needs a Dumb Pre-Pass

Why Your AI Assistant Needs a Dumb Pre-Pass

Comments 1
4 min read
Why AI Code Needs a Deterministic Gate, Not Just an LLM

Why AI Code Needs a Deterministic Gate, Not Just an LLM

Comments
3 min read
What Gets You Cited by AI: The Numbers (2026)

What Gets You Cited by AI: The Numbers (2026)

Comments
5 min read
A Field Taxonomy of Bugs in AI-Generated Python

A Field Taxonomy of Bugs in AI-Generated Python

Comments
3 min read
You Feel 20% Faster. A Study Says 19% Slower.

You Feel 20% Faster. A Study Says 19% Slower.

Comments
2 min read
AI Shopping Agents Pick Products. Help Yours Win.

AI Shopping Agents Pick Products. Help Yours Win.

Comments
5 min read
Is AI-Generated Code Buggier? The 2025-26 Data

Is AI-Generated Code Buggier? The 2025-26 Data

Comments 1
3 min read
The Q1 2026 AI-Code CVE Reckoning

The Q1 2026 AI-Code CVE Reckoning

Comments
6 min read
Four Performance Bugs AI Coders Introduce Every Day

Four Performance Bugs AI Coders Introduce Every Day

Comments
4 min read
GEO: What the Research Says About AI Search

GEO: What the Research Says About AI Search

1
Comments 1
8 min read
We Benchmarked BrassCoders Against a Frontier Model

We Benchmarked BrassCoders Against a Frontier Model

Comments
5 min read
I built 90+ AI prompts because raw transcripts are useless

I built 90+ AI prompts because raw transcripts are useless

Comments 2
3 min read
I ended up building a transcription tool

I ended up building a transcription tool

Comments
2 min read
loading...