Scan of 13 Popular AI-App Starter Repos Finds Only 4 Clean

A developer scanned 13 popular open-source AI app templates with deterministic analyzer vibecheck: only 4 repositories were clean, while the rest had 101 findings — 50 critical, 18 high, and 33 medium. Most common were API routes without authentication (6 repos) and secrets exposed in browser bundles (5).

• 4 of 13 repositories clean; others had 101 findings
• 50 critical, 18 high, and 33 medium findings
• route-without-auth found in 6 repositories
• client-exposed-secret and dangerous-html each in 5 repos