5 security patterns GitHub Copilot generates that no linter catches (opens in new tab)

I've been scanning AI-generated codebases for the past month. Here are 5 patterns that appear most often and slip past every standard tool. 1. MISSING_WRITE — The function that saves nothing def save_payment(payment_data: dict) -> dict: validated = validate(payment_data) return {"status": "saved", "id": generate_id()} # No INSERT. No UPDATE. Payment gone. 2. FAKE_ASYNC — async with zero awaits async def fetch_orders(user_id: str) -> list: conn = psycopg2.connect(DATABASE_URL) # blocking — def...