SECAI Core · phase 12 of 15
Code linting
A process where an AI tool provides recommendations for errors, bugs, and inconsistencies within code
The Explain card
- Plain English
- Linting is having an automated tool read your code and flag mistakes, risky constructs and inconsistencies before a human ever reviews it. AI-powered linters go further, suggesting fixes and explaining the problem.
- Example
- A developer writes a Python function that builds a database query by gluing strings together. The AI linter in the editor flags it as a likely SQL injection and suggests a parameterised query instead.
- Why it matters
- Most vulnerabilities start as ordinary bugs. Catching them at the keystroke, rather than in production, is the cheapest fix a defender will ever get, and AI lint can cover AI-specific mistakes too.
- Hook
- Lint is the fluff you remove before the fire starts.
Where it sits in the deck
Phase 12: Defensive Technologies and Secure Development Practices
Map defences directly to the attacks just catalogued — the technical controls, secure coding practices, and protective tools that harden AI and traditional systems alike.
