whereismyai
Iron Laws
Iron Laws: Source code inspection CLI that checks AI-generated projects for security, structure, and maintenance issues.
Iron Laws is a source code inspection tool designed to check AI-generated projects for security flaws, maintenance risks, and structural problems. It targets environments without professional auditors by applying criteria from enterprise and public sector SI audits. The tool analyzes code for security vulnerabilities, hardcoded secrets, ignored exceptions, duplicated functions, and AI coding habit risks, explaining each issue in plain language with remediation guidance. It also generates fix prompts to help AI coding tools correct the issues. Supported inputs include Python, JavaScript, TypeScript, Java, C#, Go, PHP, Rust, C, C++, SQL, YAML, JSON, Dockerfiles, and configuration files.
Iron Laws at a glance
Key features
- Check security flaws and AI coding habits
- Explain issues in plain language
- Generate fix prompts for AI tools
- Verify AI-applied patches in isolated environments
- Inspect dependency vulnerabilities against OSV advisories
- Diagnose overall project structure health
- Suppress false positives with required reasons
Use it for
- Audit AI-generated code for security vulnerabilities before deployment
- Generate fix instructions for AI coding tools to correct code flaws
- Verify patches applied by AI using isolated test environments
- Diagnose project structure health and dependency risks
Alternatives to Iron Laws
- Simple Checker V1 — Verifies AI code with color-coded flowcharts and runtime evidence.
- AI Crimes — Practice catching real-world AI coding mistakes on anonymized snippets.
- Ruleherd — Audits existing agent instruction files for contradictions and drift without new formats.
- jevgrep — Reduces coding agent costs by providing targeted, relevant repository context.
- Sourcery — Automates pull request reviews and bug detection in GitHub and GitLab.
- Aegis — It ensures AI coding agents work against verified baselines and proof.
- Grit — Automates large-scale code refactoring and migration tasks efficiently.
- DeepSource — Automated code reviews that combine static analysis with AI agents.
- Codacy — Enforces unified coding standards and security policies across the software lifecycle.
- CodeScan Artex — It uses multiple parallel AI agents to read source code and verify vulnerabilities.
- jscpd — A native Rust binary that runs fast without a Node.js runtime and integrates with AI agents.
- Xss Audit — Detects vulnerabilities with 14 specialized checks.
All Iron Laws alternatives