Show HN: AISlop, a CLI for catching AI generated code smells
57 points
1 hour ago
| 19 comments
| github.com
| HN
Hi, I’m Kenny, I’ve been building aislop. I starting working on this after using Claude Code, codex and opencode several times and noticing some slops. They aren’t syntax and passes most tests, they are patterns like empty catch blocks, useless comments, duplicated helpers, dead code and many more. So I built a tool to scan and check for these patterns and wired it into hooks so after each tool call, the agent checks for the slops.

You can try it out with npx aislop scan.

It’s all local and no code is transferred. Thank you.

cityofdelusion
6 minutes ago
[-]
I’m eager to test this out. I have agent instructions to try to limit the worst of this already, but patterns still sneak through. I have a review agent run after every single edit looking for all of the following if you need more ideas for checks:

- DRY principle violations, multiple definitions of the same helpers or utilities.

- Changes that deviate from existing patterns and architecture already in the code, especially in nearby and related code

- Comments that add no context or simply restate the field name.

- Naming violations (enterprise factoryfactoryabstraction stuff, excessively long names, overly technical names, banned words like “seam”, “durable”, and no-value-qualifiers like “SaveGame” -> “Save”).

- Tests that check implementations instead of correct business behavior.

- Overly backwards-compatible unless asked for (this one is incredibly hard to keep under control, as AI loves to guard everything even if the previous code was never deployed and thus there is no contract break)

- Un-necessary guard code (this is hard to control, most common case is the AI not relying on the serializer error handler and instead adding guards that the library already handles)

- Changing public API contracts without express permission to do so (depends on the code, eg a library JAR or versioned REST service)

- Meta references to previous code versions, to tasks or todos, or to instructions and other non-code context (e.g you tell the AI the adder should ignore negative numbers and that meta fact enters the comments or code)

I usually hand review all changes myself but it’s incredibly tedious so I try to first pass with the review agent until it comes back clean. I hate wasting tokens on it though.

reply
smj-edison
1 minute ago
[-]
Oh my gosh, the guard code drives me crazy. In try so hard to get Kimi to put in asserts instead of silently swallowing corrupt values, but it keeps handling bad values poorly instead of crashing. I've even explicitly put in CLAUDE.md that correctness is more important then continuing to run, but it still keeps defensively programming when it should loudly crash.
reply
ronbenton
31 minutes ago
[-]
Petition to rename this “SlopCop”
reply
gregman1
19 minutes ago
[-]
Sold!
reply
Heavykenny
13 minutes ago
[-]
nice one
reply
fishgoesblub
35 minutes ago
[-]
Apparently I need to check in with a Doctor because code written by myself is seen as AI, and the lazy AI bits aren't. More Human than Human?
reply
add-sub-mul-div
25 minutes ago
[-]
Unfortunately, AI detection can never be assumed to be accurate for the same reason the AI itself can never be assumed to be accurate.

(Not that I think you didn't probably already know that.)

reply
bigfishrunning
1 hour ago
[-]
A linter with rules for AI-specific weirdness is absolutely a great idea, thank you! Are there any plans to support other languages besides javascript?
reply
Heavykenny
59 minutes ago
[-]
Thank you. I currently support up to 8 languages: php, go, rust, python, js and ts
reply
MonstraG
44 minutes ago
[-]
thats 6?
reply
ryandrake
37 minutes ago
[-]
The thread just became meta-ironic, with regard to AI hallucinations.
reply
xnorswap
29 minutes ago
[-]
Perhaps they're counting PHP as 3 languages in a trench coat
reply
genghisjahn
43 minutes ago
[-]
7 and 8 are left as an exercise for the reader.
reply
stymaar
38 minutes ago
[-]
I have the implementation for languages 7 and 8 but it's too big to fit in this comment section.
reply
Retr0id
39 minutes ago
[-]
well, they did say "up to" 8
reply
Hovertruck
14 minutes ago
[-]
The README also lists Java and Ruby
reply
jhack
11 minutes ago
[-]
This is a great idea. Even if you're one of those developers squarely focused on getting the final result working, code quality still matters (to people and LLMs).

Everyone should be doing regular code reviews and this helps a lot.

reply
tolawuwo
8 minutes ago
[-]
Thanks for the feedback. Really appreciate it
reply
sinansaka
17 minutes ago
[-]
I was about to write what advantage it has over linters but then saw the built on section. Good work. We use megalinter with our flavour of go and vite rules, plus extensive e2e testing after each agent run. Quality of the spec driven agentic PRs are significantly better than the baseline. Megalinter is quite resource heavy and slow, so will definitely check this out
reply
Heavykenny
12 minutes ago
[-]
Thank you, really appreciate. Feel free to create issue if you have any
reply
n0x1103
17 minutes ago
[-]
Gave it a try but there were a lot of false positives. SQLModel's exec method for example gets flagged every time thinking it's python's exec() function.
reply
bratsche
24 minutes ago
[-]
For anyone who wants something like this for Elixir, there is an open source hex package: https://hex.pm/packages/ex_slop
reply
macNchz
31 minutes ago
[-]
I don’t see if this is one of the covered cases, but one of the more common and nefarious patterns I run into is what you might call "sweeping exceptions under the rug." I think the agent’s motivation to get things running encourages these antipatterns of designing routines that are fault tolerant in a sort of maladaptive way: e.g. catching an error, logging a warning that something didn’t work, and continuing, but with now potentially missing/broken state.

This has bitten me a couple of times, and it’s surprisingly annoying to nudge agents into good/resilient patterns or identify situations that should fail loudly, at least in my experience. The retry mechanisms they come up with on their own are often pretty terrible as well.

I’ll note, though, that I have seen this from human engineers plenty of times, and at least the AI usually adds some logs rather than just totally silently absorbing an exception!

reply
ryandrake
32 minutes ago
[-]
I think a lot of the telltale signs of AI can be found in the comments. Besides the slop writing style, I've found AI comments to 1. be overly verbose, 2. unnecessarily describe before/after code state (# This function used to do foo, but now it does bar), and 3. reference its own internal "plan" (# This function is part of Stage 3 of the implementation of Use Case X from the requirements doc) WTF is Stage 3? - says code reader 2 years from now. Although I bet you can probably prompt these behaviors away.
reply
throw03172019
55 minutes ago
[-]
> I’ve been building aislop.

This made me chuckle.

Cool tool, the dead code checks can be very helpful. I’ve seen Claude leave unused functions when iterating which always frustrates me.

reply
Heavykenny
41 minutes ago
[-]
haha. I love the name - aislop
reply
Retr0id
37 minutes ago
[-]
Forgot to switch accounts?
reply
beart
33 minutes ago
[-]
OP seems to be an AI account.

> Don't post generated comments or AI-edited comments. HN is for conversation between humans.

reply
eithed
47 minutes ago
[-]
Can you explain the benefits of running this over rector / eslint? (and to certain degree phpstan / deptrac)
reply
sync
43 minutes ago
[-]
I tried it on my codebase. There's a lot of overlap with tools like Oxlint / ESLint, I'm not sure that's too valuable vs. a more focused tool that actually focuses solely on 'slop' signals. These lint rules tend to get very opinionated which is why those tools expose so many configuration options.

One real bug tho:

> [ERROR] Imports "mdast" but it's not declared in package.json

A type-only import like `import type { Blockquote, RootContent } from 'mdast';` is actually acceptable if `"@types/mdast": "^4.0.4"` is included in the package.json.

reply
Heavykenny
36 minutes ago
[-]
thanks for this catch, really appreciate. Can you create an issue on GitHub so you can easily track when I resolve this?
reply
hootz
1 hour ago
[-]
Ran it in my codebase, detected some good stuff, was able to pass the issues to my agent so they can be validated and fixed. Good job!

I'd love for it to have flags for Pi and Crush too :)

reply
Heavykenny
58 minutes ago
[-]
Thank you, really appreciate.
reply
vinnymac
37 minutes ago
[-]
I tried it but see a lot of false positives.

One funny thing I see it doing is deleting seemingly random comments lines, for example if a file has a comment that spans multiple lines but doesn’t use a multi line comment syntax. It just chooses one at random transforming the once useful comment into slop.

reply
tolawuwo
12 minutes ago
[-]
Thanks for the feedback, we’ll check that out
reply
maddhruvhn
42 minutes ago
[-]
awesome work, someone is caring about using less token :clap:
reply
Der_Einzige
1 hour ago
[-]
Related, we made "Antislop", a framework for removing repetitive phraseology from LLMs: https://arxiv.org/abs/2510.15061
reply
pixel_popping
1 hour ago
[-]
The intent is good, but frankly, credibility is lost by using "slop" words imo, OP you might seriously want to re-evaluate who is the target market, probably users that leverage high automation 24/7, startups and so-on, they don't want to incorporate products that talks about the modern way (and somehow only way to compete) of development as "slop" imo because soon enough, it's not true anymore (it's already not true with the right tooling).
reply
trollbridge
43 minutes ago
[-]
Imagine an operating system company making a product called “quick and dirty”.
reply
hootz
59 minutes ago
[-]
Yeah, to be honest, it really is a bit weird to incorporate a tool called slop into a corporate CICD flow. Anubis fixed a similar problem by creating a corp-safe version without the anime mascot.
reply
Aurornis
54 minutes ago
[-]
> Anubis fixed a similar problem by creating a corp-safe version without the anime mascot.

I wouldn’t say they fixed it. Rather it was an intentional choice to put an anime girl on websites unless you paid for the product.

reply
hootz
29 minutes ago
[-]
Fair, I guess that doesn't apply here then, as I don't think the intention of OP is to drive corps away from the main free product.
reply
axod
1 hour ago
[-]
I don't think this approach is wise.

Concentrate on code quality, and whether it does what it needs to do. Not whether it was written by AI or not.

reply
Heavykenny
1 hour ago
[-]
Thanks, I actually concentrated on improving code quality, the patterns I flagged are poor design choices that humans wouldn’t write. Examples are duplicated functions doing same thing, dead or redundant codes etc. These builds up and degrade the codebase over time.
reply
axod
1 hour ago
[-]
> ...are poor design choices that humans wouldn’t write.

They certainly do in my experience. Maybe you've been lucky and haven't worked with really messy programmers.

reply
Heavykenny
52 minutes ago
[-]
I have worked and seen these in code reviews but the issue now is code reviews are overwhelming and non existent in some cases.
reply
bigfishrunning
1 hour ago
[-]
I'm interpreting this not as a "catch ai submissions gotcha" tool, but as a "last pass in review catch mistakes AI made that i may have missed" tool. Having more linters is a good thing IMO (I say this as someone who doesn't use AI to generate code, but works with people who do and has to review a lot of AI generated code)
reply
tolawuwo
14 minutes ago
[-]
Exactly, that’s what it does. You can see the tool as a quality gate you put in place to ensure that any AI generated code meets a standard.
reply