I submitted a side-project extension for review and an AI bot found 4 real security bugs in it

I built a small Raycast extension - paste invoice JSON, get a formatted HTML/Markdown preview. Zero dependencies in the render logic, 7 unit tests passing, tsc clean. I was pretty confident in it before opening the PR to the official extensions repo. Within a few minutes, an automated reviewer (Greptile, which Raycast runs on every incoming PR)... Weiterlesen: I submitted a side-project extension for review and an AI bot found 4…