Skip to main content
Glama
Sign In
CodeAudit Agent

CodeAudit Agent

by nimra-pixel
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Hybrid

🔍 CodeAudit Agent

AI-Powered Code Security, Quality & Performance Review

Python LangGraph MCP Groq Built by Nimra

Paste any code → Get security vulnerabilities, quality issues, performance bottlenecks, auto-fix, and a graded report.

Works as a Streamlit web app AND as an MCP server for VS Code.

What it detects

Category

Checks

🔒 Security

OWASP Top 10 · SQL injection · XSS · hardcoded secrets · eval() · weak crypto · debug mode

✨ Quality

SOLID violations · cyclomatic complexity · naming · DRY · magic numbers · error handling

⚡ Performance

O(n²) loops · N+1 queries · memory leaks · blocking I/O · string concat in loops

Related MCP server: Secure Code Review MCP Server

Languages supported

Python · JavaScript · TypeScript · Java · C++ · C · C# · Go · Rust · PHP · Ruby · Swift · Kotlin · SQL · Bash

Architecture

Code input (Streamlit UI or VS Code via MCP)
    ↓
LangGraph orchestrator
    ↓ (parallel)
┌──────────────┬──────────────┬──────────────┐
│ Security     │ Quality      │ Performance  │
│ Agent        │ Agent        │ Agent        │
│ OWASP Top 10 │ SOLID/Clean  │ Big-O/leaks  │
└──────────────┴──────────────┴──────────────┘
    ↓
Fix Agent (auto-generates fixed code)
    ↓
Scorer (computes grade A+ → F)
    ↓
Report (.md + .json export)

Quick Start

git clone https://github.com/nimra-pixel/codeaudit.git
cd codeaudit
pip install -r requirements.txt
cp .env.example .env    # add GROQ_API_KEY
streamlit run app.py

MCP Server (for VS Code)

python mcp/server.py

Then install the VS Code extension from vscode/ folder.

Right-click any code → CodeAudit: Audit This File

MCP Tools exposed

Tool

Description

audit_code

Full security + quality + performance audit

quick_security_scan

Security only (faster)

detect_code_language

Detect programming language

Works with LangGraph, CrewAI, Claude Desktop, and any MCP client.

Built by

Nimra Tariq — AI Engineer & Assistant Professor, Superior University Lahore, Pakistan

GitHub

Also built: MedAgent · DeepResearch · VEMA

MIT License

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    This server cannot be deployed

    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    Maintenance

    ActivityInactive
    ResponsivenessNo recent community issues

    Resources

    Related MCP Connectors

    Related MCP Servers

    • Helios

      Heliosofficial

      alibaba
      A
      license
      Not graded
      quality
      D
      maintenance
      MCP server that securely reviews AI-generated code for vulnerabilities such as SQL injection, command injection, and hardcoded credentials.
      12
      Apache 2.0

    • Secure Code Review MCP Server

      Balakonda-reddy
      F
      license
      Not graded
      quality
      D
      maintenance
      Local MCP server that scans code for security issues (secrets, dependencies, configurations, risky patterns) and integrates with GitHub Copilot in VS Code for automated pre-commit reviews.
      -

    • mcp-rules-server

      camoran89
      F
      license
      Not graded
      quality
      D
      maintenance
      MCP server that provides code validation rules and analysis for various stacks/frameworks, enabling automated code reviews and reporting directly from VS Code and other editors.
      -