Turns a raw diff and a short context note into a PR description reviewers can actually use, grounded in the real file and function names pulled from the diff rather than generic phrasing.
Outputs a three-bullet what/why/risk summary, testing notes, the files that most deserve attention, migration or compatibility concerns, and a suggested PR title — and says so if the diff is too large to summarize well.
Reviews code that touches auth, user input, file handling, or payments, using the data it handles and its auth model as context for a targeted rather than generic pass.
Returns a severity-ranked findings table, a plain-language exploit scenario for each issue, a concrete fix, a safer pattern to use instead, and tests to add. Strictly defensive: it won't write exploit code, only flag and remediate.
Paste any unfamiliar snippet and get a statement-by-statement walkthrough instead of a single high-level summary. Each line is explained in plain language: what it does, why it's there, and any assumption it quietly depends on, with jargon defined inline as it comes up. Built for developers who already know how to code but are new to this particular codebase, library, or language idiom.