ai-code-reviewer

AI Code Reviewer

Systematically review AI-generated code to catch common mistakes before they hit production.

When to Use

• After AI generates code you plan to use
• Before committing AI-assisted changes
• When AI code "looks right" but you want verification
• Reviewing PRs with significant AI-generated content

The AI Code Review Checklist

1. Correctness Issues (Most Common)

AI often generates code that looks correct but has subtle bugs.

Check for:

• Hallucinated APIs - Methods/functions that don't exist

  // AI might generate:
  array.findLast(x => x.id === id)  // Verify this exists in your target
  

• Wrong library versions - API changes between versions

  // React 18 vs 19 differences
  // Node.js API differences
  

• Off-by-one errors - Loop bounds, array indices

  for (let i = 0; i <= arr.length; i++)  // Should be <
  

• Incorrect null/undefined handling

  user.profile.name  // What if profile is undefined?
  

2. Security Issues

AI doesn't prioritize security unless explicitly asked.

Check for:

• SQL Injection

  // BAD: AI might generate
  db.query(`SELECT * FROM users WHERE id = ${userId}`)
  
  // GOOD: Parameterized
  db.query('SELECT * FROM users WHERE id = $1', [userId])
  

• XSS Vulnerabilities

  // BAD: Direct HTML insertion
  element.innerHTML = userInput
  
  // GOOD: Escaped or use framework
  element.textContent = userInput
  

• Exposed Secrets

  // AI might hardcode values from context
  const API_KEY = 'sk-abc123...'  // Should be env var
  

• Missing Input Validation

  // AI often skips validation
  function processData(data) {
    return data.items.map(...)  // What if data is null?
  }
  

3. Performance Issues

AI optimizes for "looks correct" not "performs well."

Check for:

• N+1 Queries

  // BAD: AI loves this pattern
  users.forEach(async user => {
    const posts = await getPosts(user.id)  // N queries!
  })
  
  // GOOD: Batch
  const posts = await getPostsForUsers(userIds)