Engineering

Every new pull request is reviewed with inline comments and a summary within minutes

A fully automated code review loop that watches your GitHub repository for new pull requests. When a PR opens, an expert reviewer agent analyzes the diff for security issues, performance regressions, style violations, and logical errors. It posts line-specific comments directly on the PR and summarizes findings in a review summary. The loop tracks PR state and closes out when the PR is merged or closed.

How it works

TriggerRuns when a new pull request is opened
  1. 01
    Tool

    GitHub webhook receives PR event

    A GitHub webhook fires on `pull_request.opened` and `pull_request.synchronize` events. The payload includes the PR number, repo, and branch info.
  2. 02
    Agent

    Code Reviewer analyzes the diff

    Check out the PR branch, read the diff, and perform a thorough review covering:
- **Security**: injection risks, auth bypasses, exposed secrets
- **Performance**: N+1 queries, missing indexes, blocking calls
- **Correctness**: edge cases, null handling, type safety
- **Style**: consistency with the codebase conventions

Flag each issue with severity (P0-P3) and a suggested fix. Write review comments inline at the exact file and line.

    delegates to Security Scanner

    Scan the diff for security vulnerabilities: SQL injection, XSS, CSRF, exposed credentials, unsafe deserialization, and path traversal.

    delegates to Style Checker

    Check the diff against the repo's linter config and style guide. Flag deviations with the rule name.

  3. 03
    Tool

    Post review comments to GitHub

    Submit a pull request review with inline comments at each flagged location, plus a summary comment that rates the PR overall and lists the top 3 actions needed before merge.
  4. 04
    Goal

    Track PR until merged or closed

    Keep polling the PR state. When the PR is merged, post a congratulatory comment. When new commits are pushed, re-run the review. When the PR is closed without merge, log and exit.
ResultEvery new PR gets a structured, multi-pass code review posted as inline comments with a summary