CodeLens — AI Code Review

Inline Review Panel

Code input on the left, structured AI issues on the right

codelens.codelab.sh/review

                        Input Code
                        Python
                      

def get_user(user_id):

  import sqlite3

  conn = sqlite3.connect("users.db")

  cur = conn.cursor()

  query = f"SELECT * FROM users WHERE id={user_id}"

  cur.execute(query)

  return cur.fetchone()

def process_users(ids):

  results = []

  for i in range(len(ids)):

    results.append(get_user(ids[i]))

  return results

                        Issues Found
                        3 issues
                      

🔴

SQL Injection Vulnerability

Line 5: f-string interpolation in SQL query allows direct injection. Use parameterized queries instead.

security · critical

🟡

Import Inside Function

Line 2: Importing sqlite3 inside function is called on every invocation. Move to module level.

style · medium

🔵

Use Enumerate Instead of range(len())

Line 11: for i in range(len(ids)) is non-Pythonic. Use for id in ids.

style · low

Quality Score Dashboard

Multi-dimensional quality grades across four review dimensions

codelens.codelab.sh/score

Security

2.1 / 10 · Critical

Style

5.8 / 10 · Needs work

B+

Complexity

8.0 / 10 · Good

Readability

9.1 / 10 · Excellent

Priority Fix List

1. 🔴 Fix SQL injection — use ? placeholders

2. 🟡 Move import to module level

3. 🔵 Replace range(len()) with direct iteration

AI-Suggested Diff

Side-by-side before/after view of AI-corrected code

codelens.codelab.sh/diff

Before −7 issues

 def get_user(user_id):
−  import sqlite3
   conn = sqlite3.connect("users.db")
   cur = conn.cursor()
−  query = f"SELECT * FROM users WHERE id={user_id}"
−  cur.execute(query)
   return cur.fetchone()
 
 def process_users(ids):
   results = []
−  for i in range(len(ids)):
−    results.append(get_user(ids[i]))

After (AI Fixed) +6 improvements

+import sqlite3
 
 def get_user(user_id):
   conn = sqlite3.connect("users.db")
   cur = conn.cursor()
+  query = "SELECT * FROM users WHERE id=?"
+  cur.execute(query, (user_id,))
   return cur.fetchone()
 
 def process_users(ids):
+  return [get_user(uid) for uid in ids]