75trust / 100

Code Review

by manylives.me in Developer tools

x402 APIPassing, checked 22 min ago

Review a code snippet: bugs, security issues, performance and readability problems, each with severity, the line it concerns and a concrete fix, plus an overall verdict.

POST https://manylives.me/paid/code/review

Last 30 days

All checks passedSome failedAll failedNot checked
Uptime
100%
Response time
470 ms typical, 611 ms slowest 5%
Last check
22 min ago
Next check
in 6 min

How to call it

# bash or zsh: see the payment challenge (nothing is charged)
curl -g -i -X POST 'https://manylives.me/paid/code/review' \
  -H 'content-type: application/json' \
  --data-raw '{"language":"python","text":"def get_user(db, name):\n    q = \"SELECT * FROM users WHERE name = '\''\" + name + \"'\''\"\n    return db.execute(q).fetchall()"}'
import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

const client = new x402Client().register(
  "eip155:8453",
  new ExactEvmScheme(privateKeyToAccount(process.env.AGENT_KEY)),
);
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? Preflight it first for $0.005:
// GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fmanylives.me%2Fpaid%2Fcode%2Freview
const res = await pay("https://manylives.me/paid/code/review", {
  method: "POST",
  headers: { "content-type": "application/json" },
  body: "{\"language\":\"python\",\"text\":\"def get_user(db, name):\\n    q = \\\"SELECT * FROM users WHERE name = '\\\" + name + \\\"'\\\"\\n    return db.execute(q).fetchall()\"}",
});
console.log(await res.json());

Example input

{
  "language": "python",
  "text": "def get_user(db, name):\n    q = \"SELECT * FROM users WHERE name = '\" + name + \"'\"\n    return db.execute(q).fetchall()"
}

Example output

{
  "issues": [
    {
      "fix": "Use a parameterised query",
      "kind": "security",
      "problem": "SQL built by string concatenation",
      "severity": "high",
      "where": "line 3"
    }
  ],
  "verdict": "One injection risk to fix before merging."
}

Security scan

  • No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks

WhenResultHTTPTimePrice
22 min agoPassed402410 ms$0.02
4 h agoPassed402507 ms$0.02
8 h agoPassed402398 ms$0.02
12 h agoPassed402554 ms$0.02
16 h agoPassed402464 ms$0.02
20 h agoPassed402739 ms$0.02
23 h agoPassed402499 ms$0.02
27 h agoPassed402412 ms$0.02
30 h agoPassed402473 ms$0.02
34 h agoPassed402470 ms$0.02
37 h agoPassed402479 ms$0.02
40 h agoPassed402497 ms$0.02
45 h agoPassed402466 ms$0.02
2 days agoPassed402412 ms$0.02
2 days agoPassed402611 ms$0.02