We Are Blindly Executing AI-Generated Code

Last week I asked an AI to write a Python script that processes CSV files. The code looked reasonable. It imported os , subprocess , and urllib . It worked. I shipped it. Later I re-read it and noticed it was shelling out to curl to fetch a dependency at runtime – a URL I never verified. The script also had full read access to my home directory, my SSH keys, my AWS credentials. If that curl target…