Ai Code Review
Description
AI-powered code review CLI with multiple providers (Gemini, Claude, OpenAI). Features 95%+ token reduction via semantic chunking, 7 review types (security/performance/evaluation), multi-language support, interactive fixes, and developer skill assessment.
Installation
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open the source below and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
README
AI Code Review v4.6.9
[!WARNING] **This project is archived as of 2026-05-19. No further updates will be released.**
AI Code Review has been succeeded by **[trusty-analyze](https://github.com/bobmatnyc/trusty-analyze)** — a deterministic static analysis daemon (Rust) that delivers reproducible results, zero API cost, and sub-millisecond query latency.
This repository and the [`@bobmatnyc/ai-code-review`](https://www.npmjs.com/package/@bobmatnyc/ai-code-review) npm package remain available for cloning, downloading, and continued local use. Issues and pull requests are closed.
See **[DEPRECATED.md](DEPRECATED.md)** for the full announcement, a detailed feature comparison, and a migration guide.
A TypeScript-based tool for automated code reviews using Google's Gemini AI models, Anthropic Claude models (including Claude 4), OpenAI models, and OpenRouter API with LangChain integration for enhanced prompt management.
What's New in v4.6.7
Prompt System Modernization (#90)
- ~45% token reduction on core prompts — saves API costs on every review
- Standardized output format across all 15+ review types (consistent severity scale, confidence scoring, finding IDs)
- Updated to 2026 standards: OWASP latest edition, modern security threats (supply chain, AI/ML, API, container security), current framework/language versions
- Framework updates: React 19, Next.js 15, Django 5.2, Rails 8, Laravel 12, and 10+ more
What's New in v4.6.0
API Key Validation and Project Configuration
- 🔑 API Key Validation on Startup: Automatically validates API keys before running reviews
- Live validation against provider APIs (Google, OpenRouter, Anthropic, OpenAI)
- Clear error messages when keys are invalid or expired
- Prevents wasted time on reviews that would fail due to authentication issues
- 🔄 Interactive Key Recovery: When API key validation fails, provides interactive options
- Enter a new API key directly in the term
Related Skills
Fastapi Review
Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu
Defense in Depth
Implement multi-layered testing and security best practices.
SecLists Official Repository
[OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
Threat Hunting with Sigma Rules
Use Sigma detection rules to hunt for threats and analyze security events
Maintenance Walkthrough - 2026-03-29
- Re-triaged the full 2026-03-15 security finding set against current `main` and wrote a fresh current-head re
Google Workspace Model Armor
Filter user-generated content for safety
