AI-Powered Code Review Agent: OpenQodex for Secure Git Pushes
AI-Powered Code Review Agent: OpenQodex for Secure Git Pushes
Couldn't load pickup availability
AI-Powered Code Review Agent: OpenQodex for Secure Git Pushes
AI-Powered Code Review Agent: OpenQodex for Secure Git Pushes
The AI-Powered Code Review Agent: OpenQodex is a comprehensive tool designed to facilitate pre-push code reviews. It runs a series of security, secret, dependency, and lint scanners with a single command to evaluate the changed files. OpenQodex generates a review report before pushing, acting as a safeguard against potential code issues.
What this skill does
- Takes a frozen copy of the code change to run deterministic scanners fitting the changed files.
- Utilises tools like gitleaks, semgrep, bandit, hadolint, shellcheck, actionlint, osv-scanner, and others for comprehensive scanning.
- Engages a separate reviewer process through Claude Code or Codex to assess findings and changed lines in detail.
- Compiles findings into a single report for analysis and review.
- Allows web search and page access by the reviewer, configurable through
~/.openqodex/config.yaml.
Who it is for
OpenQodex is ideal for software developers and development teams using AI coding agents such as Claude Code, Cursor, or Codex. It benefits those who prioritise secure and efficient code change evaluations before integrating updates into shared repositories.
Use cases
- Perform code reviews before every git push to ensure security and integrity.
- Run security scans or diffs when triggered by code review requests or push blocks.
- Review changes in pull requests to avoid introducing vulnerabilities or errors.
Technical details
- Integrates with AI coding agents including Claude Code and Codex.
- Semgrep and osv-scanner employ online resources, with semgrep downloading rule packs and osv-scanner sharing dependency details.
- No additional keys or accounts are required beyond the AI agent login.
- For authorised security testing, defensive research, and educational use only.
Source & Licence
This package is built on open-source work published by openqodex (openqodex/openqodex) and distributed under Apache-2.0. The original licence text and copyright notice are included in your download.
Personal and commercial use, modification and redistribution are permitted under the Apache License 2.0, which also includes an express patent grant. Attribution and any NOTICE file must be retained.
Your purchase covers curation, licence verification, packaging, documentation and instant delivery. It does not grant exclusive rights to the underlying open-source code, which remains available under its original licence.
Delivery & Support
- Delivery: instant — a secure download link is emailed to you as soon as payment is confirmed.
- Format: ZIP archive containing the skill files, documentation and the original licence.
- Support: support@mcpcart.com — we aim to reply within 2 business days.
- Updates: updates are included only where stated on this page.
Refunds
This is a digital product delivered immediately after purchase. By completing your order you request immediate delivery and acknowledge that, once the download has been accessed, the statutory right to cancel no longer applies to the extent permitted by law. Refund requests are handled in accordance with our published Refund Policy.
Claude, Codex, Gemini and Cursor are trademarks of their respective owners. MCP Cart is an independent marketplace and is not affiliated with, endorsed by, or sponsored by any of them. Compatibility references describe interoperability only.
Trusted by Developers & Marketers
Here's what buyers say about the skills they use every day.
Ran it on a client's Google Ads account and it flagged wasted spend we'd been missing for months. Paid for itself on day one.
Optimize Ad Spend: Ad Account AuditorWe finally caught broken conversion tags before launch instead of after. The pre-launch checklist alone is worth the price.
Optimize Conversion Tracking: Pre-Launch QADropped it into Claude Code and my LCP went from 4.1s to 1.9s in an afternoon. It explains every fix it suggests, so I actually learned something too.
Optimize Core Web VitalsOur agency uses it as the final review step on every PR now. It catches security issues our linters never did.
Optimize Your Code: Best Practices & SecurityMade WCAG 2.2 compliance actually manageable. It walked through our whole storefront and produced a fix list our devs could work from directly.
Enhance Web Accessibility: WCAG 2.2As an expat freelancer in France, the DGFIP simulation saved me a very expensive appointment with an accountant. Incredibly thorough.
AI Tax Audit Skill: DGFIP Fiscal ControlWorks with both Cursor and Claude Code exactly as advertised. Setup took less than five minutes with the included README.
Optimize Profits: AI Conversion Value MapperInstant delivery, clean files, clear docs. This is how digital products should be sold. Already bought three more skills.
AI Comptable: French AccountingSupport answered my install question within a couple of hours on a Sunday. The skill itself has become part of my daily workflow.
Optimize Core Web Vitals