🔍 CodeAudit Agent

AI-Powered Code Security, Quality & Performance Review

Paste any code → Get security vulnerabilities, quality issues, performance bottlenecks, auto-fix, and a graded report.

Works as a Streamlit web app AND as an MCP server for VS Code.

What it detects

Related MCP server: code-review-mcp

Languages supported

Python · JavaScript · TypeScript · Java · C++ · C · C# · Go · Rust · PHP · Ruby · Swift · Kotlin · SQL · Bash

Architecture

Code input (Streamlit UI or VS Code via MCP)
    ↓
LangGraph orchestrator
    ↓ (parallel)
┌──────────────┬──────────────┬──────────────┐
│ Security     │ Quality      │ Performance  │
│ Agent        │ Agent        │ Agent        │
│ OWASP Top 10 │ SOLID/Clean  │ Big-O/leaks  │
└──────────────┴──────────────┴──────────────┘
    ↓
Fix Agent (auto-generates fixed code)
    ↓
Scorer (computes grade A+ → F)
    ↓
Report (.md + .json export)

Quick Start

git clone https://github.com/nimra-pixel/codeaudit.git
cd codeaudit
pip install -r requirements.txt
cp .env.example .env    # add GROQ_API_KEY
streamlit run app.py

MCP Server (for VS Code)

python mcp/server.py

Then install the VS Code extension from vscode/ folder.

Right-click any code → CodeAudit: Audit This File

MCP Tools exposed

Works with LangGraph, CrewAI, Claude Desktop, and any MCP client.

Built by

Nimra Tariq — AI Engineer & Assistant Professor, Superior University Lahore, Pakistan

Also built: MedAgent · DeepResearch · VEMA

MIT License