{"slug": "show-hn-gspot-a-tool-to-lint-gstack-code", "title": "Show HN: Gspot, a tool to lint gstack code", "summary": "A command-line tool called gspot, published as @gspothq/cli on npm, lints code written by AI coding agents and installs rule files so those agents know what will pass. gspot wraps eight existing linters — ESLint, Prettier, Ruff, Stylelint, ShellCheck, Semgrep, Knip and Trivy — into pre-commit, pre-push and CI checks that block bugs, type errors, unused code, leaked passwords and API keys, and packages with known vulnerabilities or disallowed licenses. Setup runs through `npx gspot init` and `npx gspot install`, and gspot writes an AGENTS.md plus a per-language rule file while pinning every tool to one version so local, agent and CI runs match.", "body_md": "# Lint the code your AI agent writes\n\ngspot is a command-line tool that lints AI-generated code and installs rules for AI coding agents.\n\n``` bash\n$ npm i -D -E @gspothq/cli$ npx gspot init$ npx gspot install\n```\n\nSet up gspot in a repository. Run curl -fsSL https://\n\n[Read the docs →](https://generativespotting.com/start/overview/)\n\nWorks with these tools\n\n- ESLint\n- Prettier\n- Ruff\n- Stylelint\n- ShellCheck\n- Semgrep\n- Knip\n- Trivy\n\n## gspot stops the commit and names each problem\n\nAn agent added a checkout function to a TypeScript project and made three mistakes. The pre-commit hook found all three.\n\n## What gspot does\n\nRun `gspot init` once. It looks at your repository and turns on the checks it needs. Then quick checks run every time you commit, slower ones before you push, and CI runs them again on every push.\n\n- ### Blocks bad codeBugs, type errors, unsafe code, and code that nothing uses cannot be committed or pushed. gspot shows the file, the line, and how to fix it.\n- ### Formats every fileCode, settings, and docs all get the same formatting. `gspot check --fix` does it for you.\n- ### Stops leaked passwords and keysIf a commit holds a password, an API key, or a token, gspot stops it before the commit exists.\n- ### Checks the packages you installgspot warns you about packages with known security holes or a license you do not allow, and checks that brand-new releases wait a few days before they install.\n- ### Tells your agent the rulesgspot writes `AGENTS.md` and a rule file for each language, so your agent knows how to write code that passes.\n- ### Works the same everywhereEvery tool is locked to one version, so you, your agent, and CI get the same result.", "url": "https://wpnews.pro/news/show-hn-gspot-a-tool-to-lint-gstack-code", "canonical_source": "https://generativespotting.com/", "published_at": "2026-10-18 22:54:39+00:00", "updated_at": "2026-10-18 23:18:52.255522+00:00", "lang": "en", "topics": ["ai-agents", "developer-tools", "ai-tools"], "entities": ["gspot", "@gspothq/cli", "ESLint", "Prettier", "Ruff", "ShellCheck", "Semgrep", "Trivy"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/show-hn-gspot-a-tool-to-lint-gstack-code", "markdown": "https://wpnews.pro/news/show-hn-gspot-a-tool-to-lint-gstack-code.md", "text": "https://wpnews.pro/news/show-hn-gspot-a-tool-to-lint-gstack-code.txt", "jsonld": "https://wpnews.pro/news/show-hn-gspot-a-tool-to-lint-gstack-code.jsonld"}}