mensonones/argus
Agentic multi-perspective code review with adversarial validation.
Heuristics and a checklist for the Argus Architecture Reviewer — coupling, circular dependencies, broken layer boundaries, misplaced responsibilities, leaky abstractions, and structural duplication. Emphasizes separating taste from concrete defects. Load when reviewing changed code for structure, or when acting as argus-architecture.
The adversarial validation gates the Argus Challenger applies to a candidate finding before it can reach the report — reachability, realistic external input, existing protections, sound reasoning, not-expected-behaviour, and not-a-duplicate. Load when validating findings, or when acting as argus-challenger.
Heuristics and a checklist for the Argus Correctness Reviewer — finding logic bugs, bad edge cases, null/undefined mishandling, exception-handling gaps, concurrency/state-consistency bugs, and incorrect API usage. Load when reviewing changed code for bugs, or when acting as argus-correctness.
Orchestrates a complete multi-perspective Argus code review of a change — correctness, security, performance, and architecture — each specialist recording evidence-backed findings, then an adversarial challenger validating every one before a deduplicated, ranked report. Use when the user asks for a "code review", "argus review", "revisão de código", "review this PR/diff/change", or a full audit of changed code.
Supplement Argus tests-review for changed tests using node:test, covering promise observation, subtests and isolation under the actual Node version. Do not apply Node runner behavior to Jest, Vitest or browser tests, or load solely because the project uses Node.
Heuristics and a checklist for the Argus Performance Reviewer — N+1 queries, loops over large inputs, repeated network/IO, excessive allocation, poor algorithmic complexity, and blocking calls on hot paths. Load when reviewing changed code for performance, or when acting as argus-performance.
Supplement an Argus review of changed React components or hooks with React state and effect semantics. Load only after confirming React usage in assigned code; a dependency declaration alone is not enough. Not a standalone lens or React Native/Next.js platform audit.
Heuristics and a checklist for the Argus Security Reviewer — taint tracing, and detection patterns for auth/authz, injection, IDOR/BOLA, SSRF, path traversal, deserialization, secrets, crypto misuse, and unsafe IO. Load when reviewing changed code for security, or when acting as argus-security.
Review changed tests for ineffective assertions, unobserved asynchronous failures, misleading mocks and broken isolation. Load when acting as argus-tests or reviewing test reliability; not for generic requests to add coverage.