logoalt Hacker News

Sevii • today at 3:04 PM • 3 replies • view on HN

They should be using an automated AI agent to validate vulnerability reports. Have it pull up the code base, confirm the bug exists, try to reproduce, then update the ticket. You might even run another AI agent pass to clean up the text before humans look at it. AI writing quality improves a lot with multiple passes.


Replies

saghm • today at 3:22 PM

"Vibe reviewing" is an underrated way of dealing with vibe coded PRs. There's going to be a lot of low-quality noise that's probably better to just close without a human looking at it, but it would be unfortunate to ignore the stuff that might be worthwhile because of that.

jayd16 • today at 3:33 PM

Sounds really expensive as far as the work you're willing to let the public invoke on your project.

tonyedgecombe • today at 3:29 PM

> AI writing quality improves a lot with multiple passes.

Or you end up with an AI version of Chinese whispers.