CodeSight is a CLI for code review. Connects to GPT-5.4, Claude 4.6, or Gemini 3.1 — finds security holes, logic bugs, and gives actionable reviews straight from your terminal.
Install it, point it at a file, read the output. That's it.
pip install codesight then run codesight config to set your API key. Takes about 20 seconds.
review for a full audit, bugs to hunt issues, docs to generate docstrings, explain to decode someone else's code, refactor to clean it up.
The model returns structured findings with line numbers. Fix the real stuff, skip the noise. Done.
Standard tools won't tell you that your auth flow leaks tokens or that a race condition hides in your queue handler. CodeSight actually understands what the code is supposed to do — and where it fails.
import hashlib is unused. Safe to remove.verify_token() catches all exceptions silently. Consider logging failures.One flag: --provider anthropic. That's it.
Open-source maintainers face an avalanche of AI-generated code but lack tools for automated security triage. CodeSight bridges that gap — finding vulnerabilities before they ship, at near-zero API cost.
One pip install. One config command. Then point it at your worst file.
Get CodeSight on GitHub