<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: Shaan Ali Khan</title>
    <description>The latest articles on DEV Community by Shaan Ali Khan (@kshaaneali).</description>
    <link>https://dev.to/kshaaneali</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3948050%2F9daf3943-3525-4873-8505-c370657e796f.webp</url>
      <title>DEV Community: Shaan Ali Khan</title>
      <link>https://dev.to/kshaaneali</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/kshaaneali"/>
    <language>en</language>
    <item>
      <title>I built an AI that reviews every PR automatically (because nobody was reviewing mine)</title>
      <dc:creator>Shaan Ali Khan</dc:creator>
      <pubDate>Sat, 23 May 2026 17:43:44 +0000</pubDate>
      <link>https://dev.to/kshaaneali/i-built-an-ai-that-reviews-every-pr-automatically-because-nobody-was-reviewing-mine-5bjd</link>
      <guid>https://dev.to/kshaaneali/i-built-an-ai-that-reviews-every-pr-automatically-because-nobody-was-reviewing-mine-5bjd</guid>
      <description>&lt;p&gt;I've been vibe coding for months.&lt;/p&gt;

&lt;p&gt;Cursor writes the code. Claude fixes the bugs. I ship.&lt;/p&gt;

&lt;p&gt;Fast. Really fast.&lt;/p&gt;

&lt;p&gt;But nobody was reviewing my code.&lt;/p&gt;

&lt;p&gt;Not me. Not a teammate. Nobody.&lt;/p&gt;

&lt;p&gt;I'd read the diff quickly, it looked fine, I merged it.&lt;/p&gt;

&lt;p&gt;Then a user found the bug I missed.&lt;/p&gt;

&lt;p&gt;They didn't email me. They just left.&lt;/p&gt;




&lt;h2&gt;
  
  
  The real problem with vibe coding
&lt;/h2&gt;

&lt;p&gt;AI helps you write code faster than ever.&lt;/p&gt;

&lt;p&gt;It does not stop you from shipping broken code.&lt;/p&gt;

&lt;p&gt;You prompt Claude. It writes 200 lines.&lt;br&gt;
You read it once. Looks fine. You merge it.&lt;/p&gt;

&lt;p&gt;But did you check what happens when &lt;br&gt;
the user object is null?&lt;/p&gt;

&lt;p&gt;Did you check what happens when the API times out?&lt;/p&gt;

&lt;p&gt;You didn't. Nobody does.&lt;/p&gt;


&lt;h2&gt;
  
  
  The bugs that kill your SaaS
&lt;/h2&gt;

&lt;p&gt;They're not exotic. They're embarrassing.&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight javascript"&gt;&lt;code&gt;&lt;span class="c1"&gt;// null not handled&lt;/span&gt;
&lt;span class="kd"&gt;const&lt;/span&gt; &lt;span class="nx"&gt;user&lt;/span&gt; &lt;span class="o"&gt;=&lt;/span&gt; &lt;span class="nf"&gt;getUser&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="nx"&gt;id&lt;/span&gt;&lt;span class="p"&gt;)&lt;/span&gt;
&lt;span class="nx"&gt;console&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="nf"&gt;log&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="nx"&gt;user&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="nx"&gt;email&lt;/span&gt;&lt;span class="p"&gt;)&lt;/span&gt; &lt;span class="c1"&gt;// crashes in prod&lt;/span&gt;

&lt;span class="c1"&gt;// missing await&lt;/span&gt;
&lt;span class="kd"&gt;const&lt;/span&gt; &lt;span class="nx"&gt;data&lt;/span&gt; &lt;span class="o"&gt;=&lt;/span&gt; &lt;span class="nf"&gt;fetchUserData&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="nx"&gt;id&lt;/span&gt;&lt;span class="p"&gt;)&lt;/span&gt;
&lt;span class="k"&gt;return&lt;/span&gt; &lt;span class="nx"&gt;data&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="nx"&gt;profile&lt;/span&gt; &lt;span class="c1"&gt;// returns Promise not data&lt;/span&gt;

&lt;span class="c1"&gt;// hardcoded secret&lt;/span&gt;
&lt;span class="kd"&gt;const&lt;/span&gt; &lt;span class="nx"&gt;stripe&lt;/span&gt; &lt;span class="o"&gt;=&lt;/span&gt; &lt;span class="k"&gt;new&lt;/span&gt; &lt;span class="nc"&gt;Stripe&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="dl"&gt;"&lt;/span&gt;&lt;span class="s2"&gt;sk_live_4eC39...&lt;/span&gt;&lt;span class="dl"&gt;"&lt;/span&gt;&lt;span class="p"&gt;)&lt;/span&gt;
&lt;span class="c1"&gt;// committed to GitHub. game over.&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;Basic stuff. The kind of thing a junior dev &lt;br&gt;
catches in 30 seconds.&lt;/p&gt;

&lt;p&gt;But you have no junior dev.&lt;/p&gt;




&lt;h2&gt;
  
  
  What I built
&lt;/h2&gt;

&lt;p&gt;PushSafe connects to your GitHub repos and &lt;br&gt;
automatically reviews every PR you open.&lt;/p&gt;

&lt;p&gt;Posts inline comments on the diff.&lt;br&gt;
Like a teammate who never sleeps.&lt;/p&gt;

&lt;p&gt;Stack: Next.js · Supabase · GitHub Webhooks · &lt;br&gt;
OpenRouter · Vercel&lt;/p&gt;




&lt;h2&gt;
  
  
  What it catches
&lt;/h2&gt;

&lt;ul&gt;
&lt;li&gt;Null/undefined crashes&lt;/li&gt;
&lt;li&gt;Missing await&lt;/li&gt;
&lt;li&gt;SQL injection&lt;/li&gt;
&lt;li&gt;Hardcoded secrets&lt;/li&gt;
&lt;li&gt;Logic errors&lt;/li&gt;
&lt;li&gt;Unhandled promises&lt;/li&gt;
&lt;/ul&gt;

&lt;h2&gt;
  
  
  What it ignores
&lt;/h2&gt;

&lt;ul&gt;
&lt;li&gt;Formatting&lt;/li&gt;
&lt;li&gt;Semicolons&lt;/li&gt;
&lt;li&gt;Indentation&lt;/li&gt;
&lt;li&gt;All the noise&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Your linter handles style.&lt;br&gt;
PushSafe handles the stuff that wakes you up at 3am.&lt;/p&gt;




&lt;h2&gt;
  
  
  Try it
&lt;/h2&gt;

&lt;p&gt;&lt;a href="//pushsafe.xyz"&gt;pushsafe&lt;/a&gt; — free, no credit card, 2 min setup.&lt;/p&gt;




&lt;p&gt;Follow along on X &lt;a href="https://x.com/kshaaneali" rel="noopener noreferrer"&gt;kshaaneali&lt;/a&gt;&lt;/p&gt;

</description>
      <category>ai</category>
      <category>vibecoding</category>
      <category>webdev</category>
      <category>programming</category>
    </item>
  </channel>
</rss>
