PR Code Reviewer

What It Does

Send a code diff or pull request content — get back a structured review with specific issues found, severity ratings (critical to low), and suggested fixes. Covers bugs, security vulnerabilities, performance concerns, and code style.

Example

Input: A diff containing const token = req.query.token; db.query("SELECT * FROM users WHERE token = " + token);

Output:

{
  "issues": [
    {
      "severity": "critical",
      "file_path": "src/auth.ts",
      "description": "SQL injection vulnerability — user input concatenated directly into query string.",
      "suggested_fix": "Use parameterized query: db.query(\"SELECT * FROM users WHERE token = ?\", [token])"
    }
  ],
  "summary": "1 critical security issue found. SQL injection in auth module.",
  "approved": false
}

When To Use This

• CI/CD integration — add AI review as an automated check on every pull request
• Security scanning — catch injection vulnerabilities, hardcoded secrets, and auth issues before they ship
• Code quality gates — enforce consistent patterns across your codebase without manual review bottlenecks