Show HN: Gspot, a tool to lint gstack code

gspot is a command-line tool that lints AI-generated code and installs rules for AI coding agents.

$ npm i -D -E @gspothq/cli$ npx gspot init$ npx gspot install

Set up gspot in a repository. Run curl -fsSL https://

Read the docs →

Works with these tools

• ESLint
• Prettier
• Ruff
• Stylelint
• ShellCheck
• Semgrep
• Knip
• Trivy

gspot stops the commit and names each problem #

An agent added a checkout function to a TypeScript project and made three mistakes. The pre-commit hook found all three.

What gspot does #

Run gspot init once. It looks at your repository and turns on the checks it needs. Then quick checks run every time you commit, slower ones before you push, and CI runs them again on every push.

• Blocks bad codeBugs, type errors, unsafe code, and code that nothing uses cannot be committed or pushed. gspot shows the file, the line, and how to fix it.

• Formats every fileCode, settings, and docs all get the same formatting. gspot check --fix does it for you.

• Stops leaked passwords and keysIf a commit holds a password, an API key, or a token, gspot stops it before the commit exists.

• Checks the packages you installgspot warns you about packages with known security holes or a license you do not allow, and checks that brand-new releases wait a few days before they install.

• Tells your agent the rulesgspot writes AGENTS.md and a rule file for each language, so your agent knows how to write code that passes.

• Works the same everywhereEvery tool is locked to one version, so you, your agent, and CI get the same result.