Sloppy: Find AI slop before it reaches production

Heyosseus's Sloppy tool introduces Laravel‑aware static analysis that flags the “AI slop” left by coding agents, offering 24 built‑in rules, git‑diff review, a Rector and Pint fix pass, Pest expectations, CI annotations, agent rulesets and an MCP server. For website owners who run Laravel‑based applications, this means AI‑generated code can now be caught before it reaches production, reducing the risk of hidden backdoors, performance regressions, or compliance violations that could expose sites to malicious bot traffic or break content‑policy enforcement. By integrating Sloppy into CI pipelines, owners gain visibility into which AI agents are contributing code, helping them enforce internal security standards and avoid unintentionally serving vulnerable endpoints that bots might exploit. **Actionable tips:** 1. Add Sloppy’s git‑diff hook to your repository and configure the 24 rules to automatically reject pull requests containing AI‑generated code anomalies. 2. Use the generated CI annotations to populate your llms.txt file with precise agent identifiers, allowing your bot‑tracking middleware to block or log traffic from suspicious AI agents. 3. Schedule the MCP server’s periodic scans in your deployment pipeline so that any new AI‑written snippets are re‑evaluated post‑merge, keeping your llms.txt and bot‑filter lists up‑to‑date.