---

What it detects

Category	Checks
🔒 Security	OWASP Top 10 · SQL injection · XSS · hardcoded secrets · eval() · weak crypto · debug mode
✨ Quality	SOLID violations · cyclomatic complexity · naming · DRY · magic numbers · error handling
⚡ Performance	O(n²) loops · N+1 queries · memory leaks · blocking I/O · string concat in loops

Languages supported

Python · JavaScript · TypeScript · Java · C++ · C · C# · Go · Rust · PHP · Ruby · Swift · Kotlin · SQL · Bash

---

Architecture

Code input (Streamlit UI or VS Code via MCP)
    ↓
LangGraph orchestrator
    ↓ (parallel)
┌──────────────┬──────────────┬──────────────┐
│ Security     │ Quality      │ Performance  │
│ Agent        │ Agent        │ Agent        │
│ OWASP Top 10 │ SOLID/Clean  │ Big-O/leaks  │
└──────────────┴──────────────┴──────────────┘
    ↓
Fix Agent (auto-generates fixed code)
    ↓
Scorer (computes grade A+ → F)
    ↓
Report (.md + .json export)

---

Quick Start

git clone https://github.com/nimra-pixel/codeaudit.git
cd codeaudit
pip install -r requirements.txt
cp .env.example .env    # add GROQ_API_KEY
streamlit run app.py

MCP Server (for VS Code)

python mcp/server.py

Then install the VS Code extension from vscode/ folder.

Right-click any code → CodeAudit: Audit This File

---

MCP Tools exposed

Tool	Description
audit_code	Full security + quality + performance audit
quick_security_scan	Security only (faster)
detect_code_language	Detect programming language

Works with LangGraph, CrewAI, Claude Desktop, and any MCP client.

---

Built by

Nimra Tariq — AI Engineer & Assistant Professor, Superior University Lahore, Pakistan

GitHub

Also built: MedAgent · DeepResearch · VEMA

---

MIT License