Custom Security Review agents for your PRs (browser extension)

Hello peer developers,

I’m sharing a workflow I built over the past few weeks that has made our pull request security reviews more consistent and more actionable.

ThinkReview is a browser extension that works across Git platforms (Gitlab, Github , azure devops and Bitbucket )and runs a custom review checklist based on what your team cares about, such as OWASP guidance and your internal secure coding standards.

Below is a quick look at the end result, then I’ll walk through how I set it up

Example: a pentesting-focused review agent

In this example, I created a review agent focused on pentesting.

Define the agent’s goal and scope (what kinds of issues it should look for).
Provide a reference the agent should follow, such as STRIKE Graph best practices. strikegraph.com/blog/pen-testing-best-practices