Review Agents
diffray doesn't just run one generic AI check — it uses a team of specialized experts, each focused on what they do best.
Smarter Reviews, Less Noise
Traditional code review tools either miss important issues or flood you with irrelevant warnings. diffray solves this with specialized agents:
- Security agent doesn't complain about code style
- Performance agent focuses on real bottlenecks, not micro-optimizations
- Each agent brings deep expertise in its domain
The result? Relevant, actionable feedback — not a wall of generic suggestions.
Your AI Review Team
🔒 Security Expert
Catches vulnerabilities before they become incidents.
- Injection attacks (SQL, XSS, command)
- Exposed credentials and secrets
- Insecure authentication patterns
- Data protection issues
⚡ Performance Specialist
Identifies what will actually slow your app down.
- Database query problems (N+1, missing indexes)
- Memory leaks and resource issues
- Inefficient algorithms
- Scalability concerns
🐛 Bug Hunter
Finds the bugs that would wake you up at 3 AM.
- Null pointer and undefined errors
- Race conditions
- Edge cases that break in production
- Logic errors
✨ Quality Guardian
Keeps your codebase maintainable as it grows.
- Complex code that needs refactoring
- Dead code and unused variables
- Unclear logic and poor naming
- Missing validation
🏗️ Architecture Advisor
Ensures your code structure stands the test of time.
- Design pattern violations
- Tight coupling between components
- Responsibility misplacement
- Scalability anti-patterns
🔄 Consistency Checker
Makes sure your team writes code like a team.
- Duplicate functionality
- Pattern deviations
- Naming inconsistencies
- Missed reuse opportunities
📝 Documentation Reviewer
Keeps your docs in sync with your code.
- Outdated documentation
- Missing API docs
- Misleading comments
🧪 Test Analyst
Ensures your tests actually protect you.
- Missing edge case coverage
- Flaky tests
- Poor test isolation
🔧 General Reviewer
Catches cross-cutting issues that don't fit specialized categories.
- Project conventions and standards
- Git and workflow practices
- Cross-domain concerns
Works Out of the Box
All agents are active by default with battle-tested rules. No configuration needed — just open a PR and get expert reviews.
Want to customize? Add project-specific rules to tailor reviews for your codebase.