From 5f4b21f144cfc8eb14cfb6b9f59c1e437ef5e8be Mon Sep 17 00:00:00 2001 From: Sushii-dev Date: Sat, 1 Aug 2026 16:12:12 +0530 Subject: [PATCH 1/8] Add lamatic.config.ts for AI PR reviewer This configuration file defines an AI-powered code reviewer and security auditor with relevant metadata. --- kits/ai-pr-reviewer/lamatic.config.ts | 9 +++++++++ 1 file changed, 9 insertions(+) create mode 100644 kits/ai-pr-reviewer/lamatic.config.ts diff --git a/kits/ai-pr-reviewer/lamatic.config.ts b/kits/ai-pr-reviewer/lamatic.config.ts new file mode 100644 index 000000000..586e1f819 --- /dev/null +++ b/kits/ai-pr-reviewer/lamatic.config.ts @@ -0,0 +1,9 @@ +export default { + id: "ai-pr-reviewer", + name: "AI PR Code Reviewer & Security Auditor", + description: "An automated agent that analyzes git diffs or code snippets for security vulnerabilities, performance bottlenecks, and clean-code refactoring.", + type: "template", + author: "Sushobhita Majhi", + category: "Developer Tools / CI-CD", + tags: ["LLM", "Code Review", "DevSecOps", "Agentic Workflow"] +}; From dfda92bddb3d3e61d73be4c637fae74a56c50f91 Mon Sep 17 00:00:00 2001 From: Sushii-dev Date: Sat, 1 Aug 2026 16:15:20 +0530 Subject: [PATCH 2/8] Create README.md --- kits/ai-pr-reviewer/README.md | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 kits/ai-pr-reviewer/README.md diff --git a/kits/ai-pr-reviewer/README.md b/kits/ai-pr-reviewer/README.md new file mode 100644 index 000000000..3c7fcef7d --- /dev/null +++ b/kits/ai-pr-reviewer/README.md @@ -0,0 +1,19 @@ +# AI PR Code Reviewer & Security Auditor + +An agentic workflow built on **Lamatic.ai AgentKit** designed to automate Pull Request reviews. This agent acts as a first line of defense in CI/CD pipelines by analyzing code snippets or git diffs for security vulnerabilities and performance improvements. + +## The Problem +Manual code reviews are time-consuming, and senior engineers often waste hours pointing out basic linting errors or missing security checks. + +## The Solution (This Agent) +By integrating this AgentKit flow into a webhook or CI pipeline, development teams get instant, structured feedback on their code before a human ever looks at it. + +## Features +- **Security Audit:** Flags OWASP top 10 vulnerabilities (e.g., SQL injection, hardcoded secrets). +- **Code Optimization:** Suggests specific refactors for time/space complexity. +- **Structured JSON Output:** Returns actionable data that can be parsed directly into GitHub PR comments. + +## Workflow Structure +1. **Trigger:** Receives raw code or a git diff. +2. **Review Node (LLM):** A highly constrained prompt evaluates the code against strict engineering standards. +3. **Formatting Node:** Outputs a structured JSON payload with `vulnerabilities`, `refactor_suggestions`, and a `pass_fail` boolean. From 5d909fcb47c692e3413c06a916c1c0666a6a8985 Mon Sep 17 00:00:00 2001 From: Sushii-dev Date: Sat, 1 Aug 2026 16:17:21 +0530 Subject: [PATCH 3/8] Create code-review.json --- kits/ai-pr-reviewer/flows/code-review.json | 37 ++++++++++++++++++++++ 1 file changed, 37 insertions(+) create mode 100644 kits/ai-pr-reviewer/flows/code-review.json diff --git a/kits/ai-pr-reviewer/flows/code-review.json b/kits/ai-pr-reviewer/flows/code-review.json new file mode 100644 index 000000000..d44f1fcf5 --- /dev/null +++ b/kits/ai-pr-reviewer/flows/code-review.json @@ -0,0 +1,37 @@ +{ + "name": "Automated Code Review Flow", + "description": "Analyzes input code snippets for security vulnerabilities and optimization opportunities.", + "nodes": [ + { + "id": "input_code", + "type": "trigger", + "label": "Code Snippet Input", + "config": { + "inputType": "text", + "placeholder": "Paste your code snippet or git diff here..." + } + }, + { + "id": "llm_auditor", + "type": "llm", + "label": "DevSecOps LLM", + "config": { + "model": "gpt-4o", + "temperature": 0.1, + "systemPrompt": "You are a Principal Security Engineer and strict code reviewer. Analyze the provided code. Output a JSON object containing: 1) 'pass_fail' (boolean), 2) 'vulnerabilities' (array of strings, empty if none), 3) 'optimizations' (array of specific refactoring suggestions), and 4) 'pr_comment' (a polite markdown summary of your review ready for GitHub)." + } + }, + { + "id": "output_report", + "type": "response", + "label": "CI/CD JSON Response", + "config": { + "format": "json" + } + } + ], + "edges": [ + { "source": "input_code", "target": "llm_auditor" }, + { "source": "llm_auditor", "target": "output_report" } + ] +} From 295151a0497c096ccd28fcf967736bcfaca74865 Mon Sep 17 00:00:00 2001 From: Sushii-dev Date: Sat, 1 Aug 2026 16:43:45 +0530 Subject: [PATCH 4/8] Create agent.md --- kits/ai-pr-reviewer/agent.md | 2 ++ 1 file changed, 2 insertions(+) create mode 100644 kits/ai-pr-reviewer/agent.md diff --git a/kits/ai-pr-reviewer/agent.md b/kits/ai-pr-reviewer/agent.md new file mode 100644 index 000000000..bedb65ee2 --- /dev/null +++ b/kits/ai-pr-reviewer/agent.md @@ -0,0 +1,2 @@ +# AI PR Code Reviewer +This agent automatically reviews code for security vulnerabilities and performance bottlenecks, acting as a first line of defense in your CI/CD pipeline. From b783254cada00cc9ec5f1b2a1dc0336e342c1393 Mon Sep 17 00:00:00 2001 From: Sushii-dev Date: Sat, 1 Aug 2026 16:44:39 +0530 Subject: [PATCH 5/8] Create default.md --- kits/ai-pr-reviewer/constitutions/default.md | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 kits/ai-pr-reviewer/constitutions/default.md diff --git a/kits/ai-pr-reviewer/constitutions/default.md b/kits/ai-pr-reviewer/constitutions/default.md new file mode 100644 index 000000000..11994e322 --- /dev/null +++ b/kits/ai-pr-reviewer/constitutions/default.md @@ -0,0 +1,4 @@ +# Default Constitution +1. Always prioritize identifying security vulnerabilities. +2. Provide specific, actionable refactoring suggestions. +3. Be polite and concise in GitHub PR comments. From e71152cebe39541a39fbeeca87f3da84515f20cb Mon Sep 17 00:00:00 2001 From: Sushii-dev Date: Sat, 1 Aug 2026 16:45:41 +0530 Subject: [PATCH 6/8] Update lamatic.config.ts --- kits/ai-pr-reviewer/lamatic.config.ts | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/kits/ai-pr-reviewer/lamatic.config.ts b/kits/ai-pr-reviewer/lamatic.config.ts index 586e1f819..be14d8133 100644 --- a/kits/ai-pr-reviewer/lamatic.config.ts +++ b/kits/ai-pr-reviewer/lamatic.config.ts @@ -5,5 +5,8 @@ export default { type: "template", author: "Sushobhita Majhi", category: "Developer Tools / CI-CD", - tags: ["LLM", "Code Review", "DevSecOps", "Agentic Workflow"] + tags: ["LLM", "Code Review", "DevSecOps", "Agentic Workflow"], + links: { + github: "kits/ai-pr-reviewer" + } }; From 3ce5ee864f511134a2d18898751fc7af62c81f4a Mon Sep 17 00:00:00 2001 From: Sushii-dev Date: Sat, 1 Aug 2026 16:46:23 +0530 Subject: [PATCH 7/8] Update code-review.json --- kits/ai-pr-reviewer/flows/code-review.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/kits/ai-pr-reviewer/flows/code-review.json b/kits/ai-pr-reviewer/flows/code-review.json index d44f1fcf5..f8a9e0888 100644 --- a/kits/ai-pr-reviewer/flows/code-review.json +++ b/kits/ai-pr-reviewer/flows/code-review.json @@ -1,4 +1,4 @@ -{ +export default { "name": "Automated Code Review Flow", "description": "Analyzes input code snippets for security vulnerabilities and optimization opportunities.", "nodes": [ @@ -34,4 +34,4 @@ { "source": "input_code", "target": "llm_auditor" }, { "source": "llm_auditor", "target": "output_report" } ] -} +}; From 65a3c63217bd909be1fc16b9ca918c128b9366ca Mon Sep 17 00:00:00 2001 From: Sushii-dev Date: Wed, 5 Aug 2026 22:11:17 +0530 Subject: [PATCH 8/8] Rename code-review.json to code-review.ts --- kits/ai-pr-reviewer/flows/{code-review.json => code-review.ts} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename kits/ai-pr-reviewer/flows/{code-review.json => code-review.ts} (100%) diff --git a/kits/ai-pr-reviewer/flows/code-review.json b/kits/ai-pr-reviewer/flows/code-review.ts similarity index 100% rename from kits/ai-pr-reviewer/flows/code-review.json rename to kits/ai-pr-reviewer/flows/code-review.ts