How it works & honest limits: SentinelJS runs a library of static pattern-based rules (the same classes of checks used by tools like Semgrep and Bandit) entirely in your browser. Static analysis catches many real, common flaws — but it can miss context-dependent bugs and can flag things that are safe in your specific setup (false positives). Treat it as a fast first-pass review, not a guarantee. Always apply human judgment for security-critical code.