Copied code from an AI assistant, a forum or a tutorial? LookFirst reads it, without running it, and shows what it would build or touch: servers, open ports, files on your computer, websites it talks to, packages it installs. Then it explains the risks in plain English.
Everything happens in your browser. Your code is not sent anywhere: this page can only load its own files.
Choose files, or a whole folder. They are read here and never uploaded.
Code of the kind AI assistants often write. Each one has risks on purpose; the keys and addresses are made up.
Loading the reader…
Bicep files cannot be read on this page. They need Microsoft's Bicep compiler, which only runs on a computer, not in a web browser. Two ways to check :
- Open it in VS Code with the LookFirst extension, which uses the Bicep compiler on your computer.
- Or turn it into an ARM template, which this page can read. Run
az bicep build --file main.bicepand open the.jsonfile it makes here.
Use it where your code is
VS Code
Checks files as you open, save or paste them, puts the problems in the editor, and can ask the AI you already use to explain and fix them. Download
Pull requests
A GitHub Action marks problems on the changed lines and sums them up in the pull request. How to add it
Command line
One program for Windows, macOS and Linux: lookfirst read ./infra. Download
LookFirst tells you what it found by reading the code. It cannot promise that code is safe: code written to hide what it does can get past any tool that only reads it.