$ interactive sandbox

Paste code.
Run scan.

Try the conversion moment directly: inspect risky AI-generated code, see findings, apply the safe fix, and copy the CLI command.

src/Preview.tsx

import React from 'react';

export function Preview({ markdown }) {
  const html = marked.parse(markdown);

  return (
    <article
      className="preview"
      dangerouslySetInnerHTML={{ __html: html }}
    />
  );
}

Ratchet findings

score

72/100

high risk

Unsanitized HTML render

high

dangerouslySetInnerHTML renders generated markdown without a sanitizer. This is the classic "AI wrote a preview pane" security bug.

Implicit any props

medium

The component accepts untyped input. Ratchet would ask for a typed boundary before this reaches CI.

$ ratchet scan src/Preview.tsx --output-json

Try it on your codebase

Install Ratchet globally and run the same scan from your terminal in under 60 seconds.

$ npm install -g ratchet-run

Install from npm View Pricing

Paste code.Run scan.

Unsanitized HTML render

Implicit any props

Try it on your codebase

Paste code.
Run scan.