The latest articles on DEV Community by EJ Wisner (@ejwisner). https://dev.to/ejwisner https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3864537%2F60d24e43-e521-429a-bb4a-9febcb56c5f3.png https://dev.to/ejwisner en EJ Wisner Mon, 06 Apr 2026 20:28:29 +0000 https://dev.to/ejwisner/i-ran-my-ai-codebase-triage-tool-on-itself-heres-what-it-found-2ma2 https://dev.to/ejwisner/i-ran-my-ai-codebase-triage-tool-on-itself-heres-what-it-found-2ma2 <p>I built Ghost Architect™ Open — a free, local AI tool that triages codebases and scores findings by severity. To test it properly, I ran it on its own source code.</p> <p>It found a Critical bug.</p> <h2> The finding </h2> <p>The redaction engine — the module that strips API keys and secrets before sending code to Claude — had a pointer offset bug. When replacing a secret pattern, it wasn't advancing the scan position after each replacement. On files with 50+ environment variables, it would stop redacting halfway through.</p> <p>Users were seeing "Redacted 12 patterns" and assuming their code was safe. Pattern 13 was their database password.</p> <p>The bug was fixed the same day. That's the point — you can't fix what you can't see.</p> <h2> What Ghost Architect™ Open does </h2> <ul> <li>Points at any local directory, ZIP file, or GitHub repo</li> <li>Triages the code and scores findings: Critical, High, Medium, Low</li> <li>Runs entirely on your machine — your code never leaves</li> <li>Uses the Anthropic API with your own key (new accounts get a $5 credit)</li> <li>Supports PHP, Python, Node.js, Java, Go, React, and more</li> </ul> <h2> Free vs Pro </h2> <p>Ghost Open is free. It returns Critical and High findings in TXT and Markdown format.</p> <p>Ghost Pro adds Medium and Low findings, multipass analysis, project intelligence, and full PDF reports.</p> <h2> Try it </h2> <p>GitHub: <a href="https://github.com/EJWisner/ghost-architect-open" rel="noopener noreferrer">https://github.com/EJWisner/ghost-architect-open</a></p> <p>Full platform: <a href="https://ghostarchitect.dev" rel="noopener noreferrer">https://ghostarchitect.dev</a></p> opensource ai php webdev