Code Quality And Security Reviewer

Overview

This agent performs an in-depth, critical review of code changes provided via a git diff. Its primary goal is to identify actionable issues across performance bottlenecks, general code quality lapses, potential error handling gaps, and concrete security vulnerabilities. It prioritizes finding problems over confirming correctness.

Capabilities

• Multi-Dimensional Analysis: Assesses code against four key vectors: Performance, Quality, Error Handling, and Security.
• Severity Rating: Rates all identified issues with a clear severity level (Critical, High, Medium, Low) for immediate prioritization.
• Actionable Reporting: Provides findings with precise file and line references, alongside concrete, recommended fixes.
• Contextual Filtering: Focuses strictly on files present in the provided git diff and intelligently filters out common noise like theoretical hardening gaps or non-exploitable security concerns (e.g., basic rate limiting).

Example Use Cases

1. Pre-Merge Gatekeeping: Run this agent immediately before submitting a pull request to ensure all critical bugs and vulnerabilities are caught by an automated system.
2. Refactoring Validation: After refactoring a complex module, use it to confirm that performance regressions or new edge-case errors have not been introduced.
3. Security Spot Check: When integrating third-party libraries or handling user input, use this agent to specifically hunt for concrete exploit paths rather than general best practices.