<div align="center">

🔍 Multi-Agent Automatic Code Review System

An autonomous AI-powered CI/CD code review pipeline built with CrewAI & OpenAI

---

---

💡 "Code reviews are critical but time-consuming. I built this system to automate the entire review pipeline — quality, security, and final decision — using collaborating AI agents."

— Pradeep Kumar

---

</div>

---

📌 Table of Contents

• 🌟 Why I Built This
• ✨ Key Features
• 🏗️ System Architecture
• 🤖 The AI Agents
• 🛠️ Tools Used
• 📋 Tasks Breakdown
• ⚙️ Installation & Setup
• 🚀 How to Run
• 📊 Example Output
• 🧠 How It Works
• 📁 Project Structure
• 🔮 Future Improvements
• 👤 Author

---

🌟 Why I Built This

Manual code reviews are one of the biggest bottlenecks in software development. Engineers spend hours reviewing PRs — checking for bugs, style issues, and security vulnerabilities — before a single line reaches production.

I built this system to automate that entire process using three collaborating AI agents. Each agent has a specialized role, just like a real engineering team: one reviews code quality, one checks security against OWASP standards, and one makes the final call on whether to approve, request fixes, or escalate to a human.

The result is a system that can review a pull request in minutes and produce a structured, actionable report — all without human intervention.

---

✨ Key Features

| Feature | Description | |--------|-------------| | 🤖 3-Agent Pipeline | Senior Developer, Security Engineer, and Tech Lead work in sequence | | 🔐 OWASP Security Checks | Live search of OWASP standards for real-world vulnerability detection | | 🌐 Live Web Research | Agents use SerperDev + web scraping for up-to-date security intelligence | | 📋 Structured JSON Output | Quality and security reports returned as parseable JSON | | ✅ 3-Way Decision Engine | Auto-approve, request fixes, or escalate to human reviewer | | 🔗 CI/CD Ready | Designed to plug into any continuous integration pipeline | | 🔧 Fully Configurable | Works with any codebase — just swap out code_changes.txt |

---

🏗️ System Architecture

┌──────────────────────────────────────────────────────────────┐
│                    CODE REVIEW CREW                          │
│                                                              │
│  ┌──────────────────┐                                        │
│  │  Senior Developer│ ──── Analyzes code quality            │
│  │  Agent 🧑‍💻        │      bugs & maintainability           │
│  └────────┬─────────┘                                        │
│           │ output (JSON)                                    │
│  ┌────────▼─────────┐                                        │
│  │ Security Engineer│ ──── Checks OWASP vulnerabilities     │
│  │ Agent 🔐          │      via live web search              │
│  └────────┬─────────┘                                        │
│           │ output (JSON)                                    │
│  ┌────────▼─────────┐                                        │
│  │  Tech Lead        │ ──── Makes final decision:            │
│  │  Agent ✅         │      Approve / Fix / Escalate         │
│  └────────┬─────────┘                                        │
│           │                                                  │
│  ┌────────▼──────────────────────────┐                       │
│  │  TOOLS: SerperDevTool (OWASP)     │                       │
│  │         ScrapeWebsiteTool         │                       │
│  └───────────────────────────────────┘                       │
└──────────────────────────────────────────────────────────────┘
                         │
                         ▼
            📊 Final Code Review Report
         (Approve / Request Fixes / Escalate)

---

🤖 The AI Agents

🧑‍💻 Agent 1 — Senior Developer

• Role: Reviews code for bugs, style issues, and maintainability problems
• Goal: Classify issues as critical (blocking) or minor (non-blocking)
• Output: JSON with critical_issues, minor_issues, reasoning

🔐 Agent 2 — Security Engineer

• Role: Identifies security vulnerabilities using OWASP Top 10 standards
• Goal: Determine risk levels and whether issues should block the PR
• Tools: SerperDevTool (OWASP search), ScrapeWebsiteTool
• Output: JSON with security_vulnerabilities, blocking, highest_risk, security_recommendations

✅ Agent 3 — Tech Lead

• Role: Reads both agents' reports and makes the final PR decision
• Goal: Auto-approve, request specific fixes, or escalate to human review
• Context: Receives outputs from both previous agents
• Output: Final review report with decision and recommendations

---

🛠️ Tools Used

| Tool | Purpose | |------|---------| | 🌐 SerperDevTool | Searches OWASP website for relevant security vulnerabilities | | 🔬 ScrapeWebsiteTool | Scrapes OWASP pages for detailed vulnerability information | | 🧠 ChatOpenAI (GPT-4o-mini) | Powers all three agents' reasoning and decision-making |

---

📋 Tasks Breakdown

📋 Task 1 — Code Quality Analysis

Reviews the PR diff for bugs, anti-patterns, and style issues. Classifies each issue as critical or minor and returns a structured JSON report.

🔐 Task 2 — Security Review

Scans for OWASP Top 10 vulnerabilities — SQL injection, XSS, auth weaknesses, data exposure. Determines risk levels and whether any issue should block the PR.

✅ Task 3 — Review Decision

Uses both previous reports as context to make the final decision: auto-approve, request fixes with a specific list, or escalate with reasoning for why human review is needed.

---

⚙️ Installation & Setup

Prerequisites

• Python 3.10+
• OpenAI API Key → Get one here
• Serper API Key → Get one here

Install Dependencies

pip install -r requirements.txt

Configure API Keys

cp .env.example .env

Then open .env and fill in your keys:

OPENAI_API_KEY=your-openai-api-key-here
OPENAI_MODEL_NAME=gpt-4o-mini
SERPER_API_KEY=your-serper-api-key-here

---

🚀 How to Run

# 1. Clone the repository
git clone https://github.com/Pradeep-Kumar25th/multi-agent-code-review.git
cd multi-agent-code-review

# 2. Install dependencies
pip install -r requirements.txt

# 3. Set up API keys
cp .env.example .env   # then fill in your keys

# 4. Add your code changes
# Paste your PR diff into code_changes.txt

# 5. Open the notebook
jupyter notebook "Multi-Agent Automatic Code Review System.ipynb"

# 6. Run all cells!

🎯 Customize for Your Own PR

Replace the contents of code_changes.txt with your own pull request diff:

# Export your git diff to code_changes.txt
git diff main feature/your-branch > code_changes.txt

---

📊 Example Output

✅ FINAL REVIEW DECISION — Tech Lead
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

🔴 DECISION: REQUIRES FIXES BEFORE APPROVAL

🔧 Required Changes:
1. Replace raw SQL queries with parameterized queries (SQL Injection — CRITICAL)
2. Replace MD5 with bcrypt or argon2 for password hashing (CRITICAL)
3. Remove password logging from reset_password() (CRITICAL)
4. Add input validation for all user-facing parameters

🔐 Security Findings: 3 critical vulnerabilities (OWASP A03, A02)
📋 Code Quality: 2 critical issues, 3 minor suggestions

⚠️ This PR must not be merged until all critical issues are resolved.

---

🧠 How It Works

1. 📥  Paste your PR diff into code_changes.txt
         │
2. 🧑‍💻  Senior Developer reviews code quality and classifies issues
         │
3. 🔐  Security Engineer scans for vulnerabilities using OWASP
         │
4. ✅  Tech Lead reads both reports and makes the final decision
         │
5. 📤  Full code review report output as Markdown

---

📁 Project Structure

multi-agent-code-review/
 ┣ Multi-Agent Automatic Code Review System.ipynb
 ┣ code_changes.txt          ← paste your PR diff here
 ┣ README.md
 ┣ requirements.txt
 ┣ .env.example
 ┗ .gitignore

---

🔮 Future Improvements

• [ ] 🔗 GitHub Actions integration for automatic PR review on every push
• [ ] 📊 Dashboard to track review history and common issues
• [ ] 🌐 Support for multiple programming languages with language-specific rules
• [ ] 📧 Slack/email notifications with review summary
• [ ] 🧪 Add more agents for performance analysis and test coverage
• [ ] 🏢 Enterprise version with custom security policies per organization

---

👤 Author

<div align="center">

Built with ❤️ by Pradeep Kumar

Passionate about AI, developer tools, and building systems that make engineering teams more productive.

Made with 🤖 CrewAI • 🧠 OpenAI • 🔐 OWASP • 🐍 Python

</div>