Code Review Checklist Generator for Contract PRs

WHAT IT DOES

Code Review Checklist Generator for Contract PRs helps developers and auditors systematically review Solidity code by producing a targeted checklist based on the actual source. It scans your contract for common patterns, risky constructs, and missing safeguards — then outputs a categorized list of review items with severity levels (Critical, High, Medium, Low). Each item highlights a specific area to examine, such as access control, reentrancy, input validation, or gas optimization. This turns an ad‑hoc review into a structured, repeatable process.

HOW TO USE

Paste your Solidity source into the input area and click "generate checklist". The tool analyzes the code and returns a set of review prompts grouped by category (Security, Visibility, Arithmetic, Low‑Level, etc.). Each prompt includes a brief explanation and a severity badge. Use the checklist as a starting point for your PR review — inspect each flagged area, verify whether the concern applies, and document your findings. The checklist is not a final audit but a guide to ensure common issues are not overlooked.

THE REAL MECHANISM

The generator uses pattern‑matching and heuristic rules applied to a stripped version of the source (comments and string literals removed to avoid false positives). It scans for over 15 distinct patterns: visibility modifiers, external calls (.call, .transfer, .delegatecall), unchecked blocks, assembly, selfdestruct, receive/fallback functions, event usage, require/assert density, loops, payable functions, and ERC interface references. Each pattern is mapped to a category and severity based on known Solidity security best practices. The output is grouped and sorted so reviewers can focus on the most critical items first. All processing is local — no code leaves your browser.

WHAT IT CANNOT SEE

The tool cannot verify whether issues are actually fixed, assess business logic correctness, detect cross‑contract interactions, evaluate deployment context, determine if identified patterns are exploitable in the specific contract, or replace human code review. A low‑severity item might hide a critical bug in context, and a high‑severity flag may be entirely acceptable if the contract is designed accordingly. The checklist is a starting point, not a conclusion.

PLEASE NOTE — EVM CHAINS ONLY

This tool is designed for Solidity contracts targeting Ethereum Virtual Machine (EVM) compatible chains. It does not support Vyper, Rust, Move, or other smart contract languages. All processing occurs in your browser; no contract data is stored or transmitted.