Agent PreShip Guard v1.1 fixes false positives and misses in its AI-agent code scanner

·3 views

The developers of Agent PreShip Guard, a free GitHub Action that flags risky AI-agent code before merge, tested it on two demo agents and found it got both wrong. It flagged a read-only uptime check with a fixed command as a high-severity risk while missing an agent where the model chose a destructive file-deletion call with no approval step. The root cause was that the scanner matched syntax rather than authority over which actions run. Version 1.1 corrects the false positive and adds a rule, AG008, that flags model output selecting destructive calls without an approval check in the same file. The authors note the rule is a heuristic that works per file and can miss approval gates with unusual names, and they invite users to report issues.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer Scales Privacy Directory to 215,000+ Pages in 31 Languages

A developer has built EraseRegistry.com, a programmatic directory helping users find account deletion and data removal options. The platform covers service-specific deep-links to account closure settings, difficulty ratings, and step-by-step instructions. It supports 31 languages and has grown to more than 215,000 indexable pages. The author describes treating content generation, localization, and technical SEO as one engineering pipeline, with attention to crawl budget, canonical tags, and hreflang configuration. Distribution is pursued through open-source contributions and launches on platforms such as Product Hunt and AlternativeTo rather than automated link-building.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Four brand colors from a first AI prompt survive in a developer's app

A developer reports that the four brand colors from the first AI prompt written in January still appear in the app's theme file, unchanged down to the hex codes. Most other early design choices, including the logo, the typography setup and the handling of five languages, did not survive. An August AI-proposed redesign with a calmer single-accent look was reverted because the neon palette read better, though a low-contrast purple was darkened for links. The app now uses two fonts while the website and a flyer use others, and the logo was redrawn from circles of friends to a map pin. The author also notes the AI silently dropped Romanian from the supported languages in a later prompt, which became a major challenge.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Taste-skill: a coding-agent front-end design process that measures its own output

Taste-skill is a GitHub project offering a front-end design skill for coding agents, built around a ten-stage workflow rather than a single prompt. The agent is dealt three of twenty researched design directions and must pick one, which the author argues guards against generic category defaults. An inspection script then opens the page in a real browser at three viewport widths and measures layout, fonts, colours, contrast and overflow, with failures required to be fixed. The workflow repeats critique and fixes for up to three rounds, and the final gate runs on the production build to catch differences from the dev server. The project estimates each build takes about 30 to 45 minutes and a few hundred thousand tokens, and requires Node 22 or newer plus a local Chrome. Its images must come from openly licensed collections with credits.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Guide Shows How Fitness Apps Can Enforce Consent and Account Deletion Across Systems

A DEV Community tutorial addresses a common privacy gap in fitness apps, where settings may appear to disable tracking while backend systems keep sending data. It argues that privacy controls must be enforced throughout the architecture, not just shown in the user interface. The guide covers two linked workflows: managing consent preferences and stopping optional processing when consent is withdrawn, and coordinating account deletion across services with authentication and failure handling. It describes the components involved, including the mobile app, backend, databases, analytics providers, job queues, and backup systems. The examples are illustrative and not production-ready, and legal and framework-specific requirements must be handled separately.

0 comments Read more at DEV Community