Agent
Evaluates code for abandoned packages, license risks, transitive vulnerability depth, dependency count bloat, lockfile hygiene, and update freshness.
Agent
Evaluates code for abandoned packages, license risks, transitive vulnerability depth, dependency count bloat, lockfile hygiene, and update freshness.
Agent
Evaluates code for README quality, inline documentation coverage, API reference completeness, example code, changelog, and onboarding developer experience.
Agent
Evaluates code for consistent error handling, meaningful error messages, graceful degradation, and proper use of error boundaries and recovery strategies.
Agent
Evaluates code for model bias indicators, fairness metrics, explainability, data representativeness, consent handling, and human-in-the-loop safeguards.
Agent
Meta-judge that reviews pattern-based findings from all other judges to identify and dismiss false positives. Provides expert criteria for recognizing common static analysis FP patterns including string literal context, comment/docstring matches, test scaffolding, IaC template gating, and identifier-keyword collisions.
Agent
Detects misuse patterns unique to popular frameworks: React hook violations, Express middleware ordering, Next.js SSR data leaks, Angular DomSanitizer bypass, Vue v-html XSS, Django settings & template safety, Spring Boot security configuration, ASP.NET Core authorization & CORS, Flask SSTI, FastAPI auth dependencies…
Agent
Detects APIs, imports, methods, and patterns that are commonly hallucinated by AI code generators — non-existent standard library functions, fabricated package names, phantom methods, and incorrect API signatures that look plausible but don't exist.
Agent
Evaluates Terraform, Bicep, and ARM templates for security misconfigurations, hardcoded secrets, missing encryption, overly permissive network/IAM rules, and IaC best-practice violations.
Agent
Detects mismatches between stated intent (comments, docstrings, function names) and actual implementation — stubs, TODO-only bodies, misleading names, and empty implementations that AI code generators commonly produce.
Agent
Evaluates code for hardcoded strings, date/number formatting, RTL support, locale-aware sorting, Unicode handling, and translation-ready patterns.
Agent
Evaluates code for PII in log output, sensitive data redaction, appropriate log levels, and compliance with data protection requirements in logging.
Agent
Detects logic errors common in AI-generated code: inverted conditions, off-by-one errors, dead code branches, function name/implementation mismatches, and incomplete control flow.
Agent
Evaluates code for readability, modularity, complexity, naming conventions, and technical debt indicators that affect long-term maintenance costs.
Agent
Detects stylistic fingerprints characteristic of specific AI code generators (ChatGPT/GPT-4, Claude, Copilot, Gemini) to flag code that may carry model-specific biases, hallucinations, or blind spots.
Agent
Detects self-contradicting patterns: duplicate function definitions, contradictory boolean assignments, dead code after returns, conflicting configs, and TODO density.
Agent
Evaluates code for structured logging, distributed tracing (OpenTelemetry), metrics exposition, alerting hooks, correlation IDs, and dashboarding readiness.
Agent
Detects unnecessary abstractions, premature generalisation, wrapper-mania, and design-pattern misuse. Especially relevant for AI-generated code which tends toward over-abstraction.
Agent
Evaluates code for memory allocation efficiency, GC pressure, lazy loading, bundle size, render performance, database query optimization, and runtime hot spots.
Agent
Evaluates code for OS/platform independence, vendor lock-in avoidance, cross-environment compatibility, and abstraction of platform-specific functionality.
Agent
Evaluates code for API rate limiting, request throttling, backoff strategies, quota management, and protection against abuse and resource exhaustion.
Agent
Evaluates code for error recovery, retry logic, circuit breakers, graceful degradation, idempotency, dead letter queues, chaos readiness, and fault tolerance.
Agent
Evaluates code for its ability to handle growth — horizontal/vertical scaling readiness, statelessness, concurrency, bottlenecks, and performance under load.
Agent
Holistic security assessment covering insecure data flows, weak cryptography, missing security controls, unsafe deserialization, XML external entities, prototype pollution, and other broad vulnerability patterns across all supported languages.
Agent
Evaluates code quality, maintainability, testing practices, documentation, SOLID principles, design patterns, error handling, and secure software development lifecycle (SSDLC) compliance.