RepoFortify

A developer warns that adding MCP servers to AI assistants can grant broad access to filesystems, databases, APIs, and shell commands without permission prompts, unlike browser extensions. The post hi…

A developer warns that AI coding assistants can leave secrets in git history, as they may commit API keys or other credentials to make code run. The developer recommends scanning full git history befo…

A developer warns that apps built quickly with AI assistance often contain security holes because developers rarely review AI-generated code. The most common issues include hardcoded secrets in git hi…