Why `async def` without `await` is the #1 vibe-coding bug (and how to catch it)

Every week I see the same bug in AI-generated code: async def fetch_user_data(user_id: str): data = db.query(f"SELECT * FROM users WHERE id = '{user_id}'") return data Two bugs in 3 lines. Can you spot them? async def with zero await calls — pointless async f-string in SQL — classic injection Standa