How to Scan AI Generated Code for AI Slop
A slop scan is a code quality pass on residue, not a proof that the feature is right.
Scanning AI generated code is how you keep code quality from depending on who had time to read the diff. A slop scan names residue, scores the tree, and can fail CI. It does not certify the product.
Local
npx aislop@latest scan
npx aislop scan --changes
npx aislop scan --jsonFirst command is a full code quality score. Second is the files you just changed. Third is for scripts. Walkthrough: npx aislop scan.
CI
npx aislop init writes .aislop/config.yml and a GitHub Actions workflow. aislop ci exits non-zero below failBelow or when an error-severity finding is present. Docs: CI / CD.
Instant scan
For a public GitHub URL, try aislop runs a real scan with no install. Same engine as the CLI.
Frequently asked questions
How do I scan AI generated code?
From the repo root run npx aislop scan. Add the changes flag for the diff, json for CI, and aislop ci to fail below a threshold.
What is a slop scan?
A deterministic pass over AI generated code for named AI slop patterns plus format, lint, complexity, and security checks. aislop is one slop scan.
Does a scan replace code review?
No. It removes repeatable residue so review can focus on intent, architecture, and risk.