The 8 most common traces AI-generated code leaves in production (and how to find them in 10 seconds)

AI coding assistants ship working code fast. But "working" and "production-ready" are two very different things. I run a small dev shop in Berlin, and over the past year we've reviewed dozens of websites built with Claude, Cursor, v0, Lovable and bolt.new. The same issues come up again and again — so consistently that you can treat them as a signature. Here are the 8 most common traces, roughly ordered by how often we see them (and how much they hurt). 1. API keys in the client bundle...