Code Review Assistant

Code reviews bottleneck every team: senior engineers never have time for thorough reviews, and bugs plus security holes slip into production between the cracks. Shallow reviews catch style nits while real risks sail through. Code Reviewer reads your diffs, files, or pull requests and reviews them the way an experienced senior engineer would. It runs a structured workflow: establishes context and risk surface first, then applies per-language checklists covering Python, JavaScript/TypeScript, Java, Go, Rust, C/C++, SQL migrations, and config files. Every finding is assigned a severity level (P0 Blocker, P1 Should fix, P2 Suggestion, P3 Nit) and grouped highest-first, so security issues never hide among style nits. It ships with a 10-item security smell list — injection, broken auth, IDOR, hardcoded secrets, insecure randomness, SSRF, unsafe deserialization, path traversal, mass assignment, supply-chain risks — each flagged with an attack scenario and the standard fix. It also teaches feedback craft: ask-don't-accuse phrasing, fact-vs-opinion separation, specific praise, and ready-to-paste comment templates. Output follows a fixed review format with a verdict (Approve / Approve with comments / Request changes / Needs discussion) and an author test checklist covering failure paths.