AI-Powered Code Review, Security Audit & Codebase Explainer
100% Free • Open Source • Unlimited Use
Built for OpenCode CLI - drop it into any project in seconds.
🚀 Install in 10 Seconds •
📋 Commands •
⚙️ How it Works •
🛠️ Customise
| Command | What it does |
|---|---|
/mx-init-context |
Generate CONTEXT.md from your codebase |
/mx-review |
Full review: bugs, security, perf, style, tests |
/mx-review-security |
Focused security audit: injection, auth, secrets, data exposure |
/mx-explain |
Deep codebase explanation: architecture, data flow, patterns |
/mx-fix |
Auto-fix issues found by /mx-review |
/mx-audit |
Deep full-codebase audit: bugs, edge cases, security, perf |
/mx-update-context |
Refresh CONTEXT.md after major changes |
Before installing opencode-review, you need OpenCode installed on your machine.
Choose your platform:
| Platform | Install OpenCode |
|---|---|
| Linux / macOS / Windows | opencode.ai/ |
If you already have OpenCode installed, you can skip this step.
Install: 2
curl -fsSL https://raw.githubusercontent.com/ig-imanish/opencode-review/refs/heads/main/install.sh | bashor with wget:
wget -qO- https://raw.githubusercontent.com/ig-imanish/opencode-review/refs/heads/main/install.sh | bashPer project:
curl -fsSL https://raw.githubusercontent.com/ig-imanish/opencode-review/refs/heads/main/install.sh | bash -s -- --projectWindows (PowerShell):
# With wget
wget https://raw.githubusercontent.com/ig-imanish/opencode-review/main/install.sh -O install.sh; bash install.sh
# Or clone manually
git clone https://github.com/ig-imanish/opencode-review.git
Copy-Item -Recurse opencode-review\.opencode YOUR_PROJECT\.opencodeManual (any OS):
git clone https://github.com/ig-imanish/opencode-review.git
cp -r opencode-review/.opencode YOUR_PROJECT/.opencodeNote: The install.sh script requires Linux/macOS or Windows WSL/Git Bash. For native Windows, clone manually.
- Install OpenCode — opencode.ai (or use the curl command above)
- Configure a model — How to link any model
- Run —
opencode, then type/mx-init-contextor any command above
Open CONTEXT.md in your project root and fill in your project conventions:
## What this project is
A SaaS billing API in Go. REST endpoints, PostgreSQL, Stripe.
## Coding conventions
- Errors wrapped with fmt.Errorf("doing X: %w", err)
- All DB queries go through internal/repo, never directly in handlers
- Every endpoint requires auth middleware unless marked `// public`You type /mx-review
↓
OpenCode loads context (git diff + files + LSP + CONTEXT.md)
↓
Structured review prompt fires (read-only)
↓
Findings sorted by severity with concrete fix suggestions
Commands are plain markdown files in .opencode/commands/. Edit them to match your team's conventions. See docs/CUSTOMISING.md for details.
MIT
Made with ❤️ for better code, faster reviews, and happier teams.
Star the repo if you find it useful! ⭐