PRSniffer Code Review
Free code review inside Visual Studio Code. PRSniffer reviews the changes you choose and reports security and quality issues on those files.
Published by OneQubitsSoftware India Pvt Limited.
Website: www.onequbitssoftware.com
Issues and feedback: info@onequbitssoftware.com
The extension is free. A review does not need an account. An AI explanation is optional and uses a provider key you supply.
What a review reports
The review covers the files in the scope you selected:
- Secrets in source
- Dependencies with known vulnerabilities
- Insecure code, such as injection and unsafe deserialization
- Infrastructure and container configuration
- License and supply-chain problems
Findings appear in the PRSniffer sidebar and in the editor. Nothing is written to your files until you accept a change.
Start a review
- Install PRSniffer Code Review from the Visual Studio Marketplace, or install the
.vsix with Extensions: Install from VSIX.
- Open a project folder. A git repository is required for a review of your changes.
- Open the Command Palette (
Cmd+Shift+P on macOS, Ctrl+Shift+P on Windows and Linux).
- Run PRSniffer: Review Changes.
- Open Open Review Panel, or click the PRSniffer icon in the activity bar.
Keyboard shortcut for PRSniffer: Review Changes: Cmd+K Cmd+M on macOS, Ctrl+K Ctrl+M on Windows and Linux.
If git has no changes, the review uses the file you have open. If that file is empty, the review stops.
Choose the changes
| What you want to review |
Command |
| Committed and uncommitted changes against the base branch |
PRSniffer: Review Changes or PRSniffer: Review All Changes (Committed + Uncommitted) |
| Only commits that are not on the base branch |
PRSniffer: Review Committed Changes |
| Only edits you have not committed |
PRSniffer: Review Uncommitted Changes |
| Change the default for the next review |
PRSniffer: Set Review Scope |
| Limit the review to files you pick |
PRSniffer: Select Files to Review |
| Compare against a different branch |
PRSniffer: Select Base Branch |
| Stop a review that is still running |
PRSniffer: Stop Review |
| Ask before reviewing again after a commit |
PRSniffer: Set Auto-Review Mode |
Findings from files outside that set are not shown.
Work through a finding
- Run Open Finding to jump to the line.
- Run Show Diff to preview a change when one can be prepared.
- Run Apply Fix or PRSniffer: Apply Fix only after you accept the preview. If no automatic change can be built, you can insert or copy the suggestion instead.
- Run Dismiss Finding or Ignore to hide a finding you do not want to track.
- Run Copy Fix Brief when you want to paste the issue into a chat or a ticket.
- Run PRSniffer: Clear Findings to empty the list.
Optional AI explanation
The review above does not need a model. If you want an explanation or a generated fix, use a provider you configure:
- Run PRSniffer: AI Settings or Configure AI Provider.
- Run Set AI Provider Key. The key is stored in VS Code secret storage.
- Run PRSniffer: Test AI Provider.
- Run Fix with AI on a finding.
Set prsniffer.offline to true to skip the AI review and live dependency advisory lookups. The local review still runs.
Project instructions
These files are sent with an AI review. They do not change the local findings.
Add path instructions in .prsniffer.yaml (or .prsniffer.yml):
path_instructions:
- path: "src/api/**"
instruction: "Handlers must validate input and check the caller's role."
A project brief can live in .prsniffer/instructions.md. An AI review also includes AGENTS.md and .cursorrules when those files are in the project.
Settings
| Setting |
Default |
What it does |
prsniffer.reviewScope |
all |
all, committed, or uncommitted |
prsniffer.baseBranch |
auto-detected |
Branch the change set is taken against |
prsniffer.severityFilter |
all |
Lowest severity shown |
prsniffer.offline |
false |
Skip the AI review and live dependency advisory lookups |
prsniffer.autoReviewMode |
prompt |
Whether a commit starts another review |
prsniffer.autoScanOnSave |
false |
Start a review when you save. Reload the window after changing this. |
PRSniffer: Open Settings opens the PRSniffer settings page.
Privacy
The local review stays on your machine, except for live dependency advisory lookups when you are online and offline mode is off. An AI review sends the files in that review to the provider you chose, using your key.
About the publisher
OneQubitsSoftware India Pvt Limited builds tools for developers who review and ship code. We publish PRSniffer Code Review, a free Visual Studio Code extension.
www.onequbitssoftware.com
info@onequbitssoftware.com
License
MIT. Copyright (c) 2026 OneQubitsSoftware India Pvt Limited.
