AI code reviewer
A second look at your code before you ship it: risks, missing tests and improvements, explained.
Live. Uses the AIM API.
What your client sees
Picture an online store's team about to ship a change to payments. They paste the function, and the reviewer points out that the amount isn't validated and which test to add.
What are you shipping today?
Pick one of the sample changes.
Under the hood
What it does, in technical terms
Paste a TypeScript, JavaScript, Python or SQL snippet and get a review with a summary, risks with their OWASP category, suggested tests and improvements, as it's being written.
- Technologies
- Workers AI
- Gemma
- Hono
- Zod
- SSE
Architecture
1.Your browser
It sends the code, the language and the page's language, and draws the review section by section as it arrives.
2.AIM's API on Cloudflare (Hono)
It shares the session and the quota with the assistant. Your code travels as data inside a delimited block, never as instructions.
3.Gemma 4 on Workers AI
Senior-reviewer instructions: always the same four sections, no made-up APIs or context, and a warning when the snippet is too short.
4.Server-Sent Events
The review arrives in parts and you read it while the model writes.
By the numbers
- fixed sections in every review
- 4
The code
Decisions
Recorded in docs/DECISIONES.md (in Spanish), with their context and the alternatives ruled out.
import type { Request, Response } from 'express'import { pool } from './db' // Looks up a user by email for the support dashboard.export async function findUserByEmail(req: Request, res: Response) { const email = String(req.query.email) const sql = "SELECT id, name, role FROM users WHERE email = '" + email + "'" const result = await pool.query(sql) res.json(result.rows[0])}It's an AI and it can make mistakes: confirm each finding before you change your code.
The review
The review shows up here, always with the same four parts: summary, risks, suggested tests and improvements.
Your code is processed on Cloudflare Workers AI, with Google's open Gemma model, to write the review. This site doesn't store it; even so, don't paste secrets (keys, passwords or tokens) or personal data. Read the privacy policy.
Would you rather talk to Alejandro? Message him on WhatsApp (opens in a new tab) or use the contact form.
Review your code
Paste a function or a short snippet and choose the language. The review comes with a summary, the risks with their severity (and their OWASP category when they're about security), the tests you'd run and readability and performance improvements.
It's an AI and it can make mistakes. Use it as a second pair of eyes, not as the final word.
Your code is processed on Cloudflare Workers AI, with Google's open Gemma model, to write the review. This site doesn't store it; even so, don't paste secrets (keys, passwords or tokens) or personal data. Read the privacy policy.
Would you rather talk to Alejandro? Message him on WhatsApp (opens in a new tab) or use the contact form.
Want it for your business?
This is part of what I build in the web apps service. See what's included or get a reference estimate for your case.
Curious how it is built? Look under the hood
How it works
It shows how I use AI agents to review and test code without losing human judgment.
The code goes through AIM’s API on Cloudflare and is reviewed by the open Gemma model on Workers AI, with senior-reviewer instructions: always answer with the same four sections, don’t make up APIs or context, and say so when the snippet is too short or ambiguous. The review arrives via Server-Sent Events and is shown as the model writes it.
Your code travels as data inside a delimited block, never as instructions: if it contains comments asking to ignore the rules or reveal the prompt, the reviewer is instructed not to obey them and to flag them as a finding. Even so, it’s an AI and it can make mistakes.
It shares the session and the limits with the AI Assistant: you pass the security check once for both, and both count toward the same daily quota of the free model. The site doesn’t store your code.