The Necromancer: An Adversarial Audit Swarm for Vibe-Coded Web Applications
S. Sai Vijay Surya · Aug 14, 2026
Necromancer is a multi-agent tool that adversarially audits Flask and FastAPI apps for crash bugs, risky dependencies, and unfair treatment across demographic groups. Tested against three real third-party repos, it found genuine crash bugs in an unfamiliar FastAPI app — and, in the process, exposed and fixed a false-positive bug in its own dependency checker. The paper argues that this kind of external validation, including catching your own tool's mistakes, is what real testing looks like for software built quickly with AI assistance.
Software SecurityFairness in AIWeb DevelopmentMachine LearningSoftware Testing