5 security patterns GitHub Copilot generates that no linter catches

I've been scanning AI-generated codebases for the past month. Here are 5 patterns that appear most often and slip past every standard tool.

1. MISSING_WRITE — The function that saves nothing

def save_payment(payment_data: dict) -> dict:

validated = validate(payment_data)

return {"status": "saved", "id": generate_id()}