Wisp: A JavaScript Snippet Security Ghost in the Machine
This is a submission for the Hacktoberfest Open-Source AI Challenge Week 4: Ghost in the Machine What I Built I built Wisp. Wisp is a timid ghost that will inspect short JavaScript snippets you paste into her snippet box for security vulnerabilities when you click the "Look at this" button. She will check the snippet and will "mark" four kinds of lines to call Gemma for correction suggestions: a…
Wisp is a JavaScript snippet security checker, resembling a timid ghost that inspects short JavaScript snippets for vulnerabilities when a user clicks the 'Look at this' button. Wisp, created by AudreyLin, operates on Ollama using the Gemma model and identifies four types of risky lines: strings used as code, HTML text, stored secrets, and scripts loaded via plain HTTP.
Upon finding a risk, Wisp marks the line and consults Gemma for a safer rewrite and citation. Wisp has four emotions, including idle, reading, worried, and relieved, and runs entirely locally, ensuring no secrets are leaked or hallucinations occur. The project aims to provide a secure JavaScript snippet inspection tool without the need for cloud services or subscription fees.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
