AI code review
yang tak pernah tidur.
Analisis pull request setara senior engineer di setiap push. Tangkap bug, celah keamanan, dan code smell sebelum merge. Powered by Xiaomi MiMo.
Yang Phreaker tangkap
Dilatih dari jutaan PR nyata dan CVE.
Celah keamanan
SQL injection, XSS, secret bocor, unsafe deserialization, command injection. Cross-ref CVE database.
Bug logika
Off-by-one, null deref, race condition, transisi state salah, side effect di render.
Masalah performa
Query N+1, re-render ga perlu, IO blocking di hot path, event listener bocor, loop tanpa batas.
Style & konvensi
Style spesifik project, dipelajari dari history repo. Bukan rule generic spam.
Test coverage
Flag logika baru tanpa test. Sarankan test case untuk edge case.
Architecture drift
Deteksi perubahan yang langgar arsitektur (ADR, AGENTS.md, CONTRIBUTING.md).
Lihat dia review PR beneran
Ini output MiMo asli di endpoint Express yang vulnerable. Ga ada cherry-pick.
diff --git a/api/users.ts b/api/users.ts@@ -12,8 +12,15 @@ export async function getUser(req: Request) { const id = req.params.id;- const user = await db.query(- `SELECT * FROM users WHERE id = '${id}'`- );+ const user = await db.query(+ `SELECT * FROM users WHERE id = ${id}`+ ); return Response.json(user); }const user = await db.query('SELECT * FROM users WHERE id = $1', [id]);if (!/^[0-9]+$/.test(id)) return new Response('Bad Request', { status: 400 });Mulai gratis. Bayar saat scale.
Semua plan: repo tanpa batas. Limit dihitung per-PR-per-bulan.
- +500 PR / bulan
- +Repo private
- +Custom rule per repo
- +AGENTS.md aware
- +Email support