The Zeno's Paradox of AI
negativezone.github.io
negativezone.github.io
It inspired the plugin, so ya know, it wasn't a complete waste.
BUT - i wrote a small tool recently where scope and environment was set and i wrote the code myself so just wanted a security check. I followed through with all suggestions just to see if it may end - ...
it does!! After adding XSS, CSRF and fixing all undefined edge cases it was actually happy!
So i'd say yes if you define the scope clearly then it will get you there.
Regarding TODOs in code I really like the philosophy of including a ticket with each todo item and pasting the ticket url in the todo for follow up and accountability... YMMV