Code Review with LLMs

Code Review with LLMs

LLM-Powered Code Review
LLMs can review code for bugs, style issues, security vulnerabilities, and best practice violations.

Review Approaches

Comprehensive Review
``python
def review_code(code: str, language: str) -> str:
return llm.generate(f"""
Review this {language} code for:
1. Bugs and logical errors
2. Security vulnerabilities
3. Performance issues
4. Code style and readability
5. Best practice violations

Code:
`{language}
{code}
`

Provide specific line numbers and suggested fixes.
""")
`

### Focused Reviews
`python
# Security-focused
def security_review(code: str) -> str:
return llm.generate(f"""
Analyze for security vulnerabilities:
- SQL injection
- XSS
- Authentication issues
- Secrets in code
- Input validation

Code: {code}
""")

# Performance-focused
def perf_review(code: str) -> str:
return llm.generate(f"""
Identify performance issues:
- N+1 queries
- Memory leaks
- Inefficient algorithms
- Unnecessary allocations

Code: {code}
""")
`

PR Review Automation
`python
def review_pr(diff: str, context: str) -> dict:
return llm.generate(f"""
Review this PR diff. Context: {context}

Diff:
{diff}

Return JSON with:
- summary: what the change does
- issues: list of problems found
- suggestions: improvements
- approval: approve/request_changes/comment
""")
``

Integration Points
| Integration | Purpose |
|-------------|---------|
| GitHub Actions | Auto-review on PR |
| Pre-commit hooks | Local checks before commit |
| IDE plugins | Real-time suggestions |
| Slack/Teams | Review notifications |

Comparison with Static Analysis
| Tool | Speed | Coverage | False Positives |
|------|-------|----------|-----------------|
| Linters (ESLint, Pylint) | Very fast | Style rules | Few |
| Static analysis (Semgrep) | Fast | Security patterns | Some |
| LLM review | Slow | Semantic understanding | Variable |

Best Practices
- Use LLM review to supplement, not replace, other tools
- Provide project context (conventions, dependencies)
- Review LLM suggestions before applying
- Fine-tune prompts for your codebase
- Cache reviews for unchanged files