doc-ai-slopcheck

Deterministic scanner for AI-style code failures. 73 rules. No LLM. No backend.

Digitalist fork of ai-slopcheck by Euraika, which is no longer published.

Catches the mistakes AI coding assistants leave behind — stub functions, silent error handling, hallucinated placeholders, hardcoded secrets, and 68 more patterns across Python, JS/TS, Go, C/C++, SQL, and Markdown.

Install

pip install git+https://github.com/Digitalist-Open-Cloud/AI-Slopcheck.git

Quick Start

# Scan a project
doc-ai-slopcheck scan . --output findings.json --fail-on warning

# View results
doc-ai-slopcheck summary findings.json

# GitHub Security tab (SARIF)
doc-ai-slopcheck sarif findings.json

# Only scan changed files (CI)
doc-ai-slopcheck scan . --changed-files git --fail-on warning

What It Catches

Features

• 73 deterministic rules — no LLM, no network, no randomness
• 6 languages — Python, JS/TS, Go, C/C++, SQL, Markdown
• Inline suppression — # slopcheck: ignore[rule_id], or # slopcheck: ignore-next[duplicate_code] above a copied block
• SARIF output — integrates with GitHub Security tab
• HTML report — standalone, shareable page (doc-ai-slopcheck html findings.json > report.html)
• Diff-only mode — scan only changed files (--changed-files git)
• Baselines — suppress existing findings, fail only on new ones
• API snapshots — detect removed API routes
• Tree-sitter — optional AST context for better precision
• Threaded — multi-core scanning (--jobs N)
• Confidence filtering — --min-confidence medium for high-signal-only mode

GitHub Actions

name: slopcheck
on: [pull_request]
jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v5
        with: { python-version: '3.12' }
      - run: pip install git+https://github.com/Digitalist-Open-Cloud/AI-Slopcheck.git
      - run: doc-ai-slopcheck scan . --output findings.json --fail-on warning
      - run: doc-ai-slopcheck github-annotations findings.json
      - run: doc-ai-slopcheck sarif findings.json > results.sarif
      - uses: github/codeql-action/upload-sarif@v3
        with: { sarif_file: results.sarif }

Baselines (Incremental Adoption)

# First run: baseline existing findings
doc-ai-slopcheck scan . --output findings.json --fail-on none
doc-ai-slopcheck create-baseline findings.json

# CI: only fail on NEW findings
doc-ai-slopcheck scan . --baseline .slopcheck/baseline.json --fail-on warning

CLI Reference

Key scan Options

Configuration

Create .slopcheck/config.yaml (or .slopcheck.yaml):

rules:
  # Disable a rule
  js_loose_equality:
    enabled: false
  
  # Enable an opt-in rule with custom threshold
  deep_nesting:
    enabled: true
    max_depth: 5
  
  # Configure detection
  hallucinated_placeholder:
    allowed_domains: ["example.com", "localhost"]

Tree-sitter (Optional)

For better precision (~5% improvement on string/comment context detection):

pip install "doc-ai-slopcheck[ast] @ git+https://github.com/Digitalist-Open-Cloud/AI-Slopcheck.git"
# Or manually:
pip install tree-sitter-python tree-sitter-javascript tree-sitter-go tree-sitter-typescript

Project Layout

doc_ai_slopcheck/
├── cli.py                 — 6 CLI commands
├── config.py              — 50+ Pydantic config models
├── models.py              — Finding, ScanResult (stable contract)
├── engine/
│   ├── scanner.py         — Threaded orchestrator
│   ├── duplication.py     — Cross-file copy-paste detector
│   ├── suppression.py     — Inline ignore parser
│   └── context_filter.py  — String/comment detector
├── parsers/
│   └── treesitter.py      — Optional AST adapter
├── rules/
│   ├── generic/           — 71 cross-repo rules
│   └── repo/              — 1 architecture rule
├── output/
│   ├── sarif.py           — SARIF v2.1.0
│   ├── annotations.py     — GitHub annotations
│   └── markdown_summary.py
└── state/
    └── store.py           — Baseline persistence

Development

Requires Python 3.12+ and Poetry 2.x.

poetry install            # add --all-extras for tree-sitter and requests
poetry run pytest
poetry run ruff check .
poetry build

License

MIT — Euraika 2026. Fork maintained by Digitalist.