
Security News
Rust 1.100 Will Add Dependency Cooldowns to Cargo
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.
AI-powered code review from your terminal.
npm install -g @kodus/cli
curl -fsSL https://raw.githubusercontent.com/kodustech/cli/main/install.sh | bash
brew install kodus/tap/kodus
npx @kodus/cli review
# Run an interactive review (default mode)
kodus review
# Run a review on staged files (interactive)
kodus review --staged
# Run a review on a specific commit (interactive)
kodus review --commit HEAD~1
# Run a review comparing against another branch (interactive)
kodus review --branch main
# Run a review on specific files (interactive)
kodus review src/index.ts src/utils.ts
# Review using only configured rules (no general suggestions)
kodus review --rules-only
# Fast mode: quicker analysis (good for large diffs)
kodus review --fast
# Auto-fix: apply all fixable issues automatically
kodus review --fix
# Non-interactive modes:
# - JSON output
kodus review --format json
# - Markdown report
kodus review --format markdown
# - AI Agent mode (optimized for Claude Code, Cursor, etc)
kodus review --prompt-only
Sign up at https://app.kodus.io to create your account.
# Login with your account
kodus auth login
# Check authentication status
kodus auth status
# Logout
kodus auth logout
# Generate CI/CD token
kodus auth token
Navigate through issues and apply fixes interactively:
# Interactive mode is now the default
kodus review
# You can also explicitly enable it
kodus review --interactive
kodus review -i
Features:
Automatically apply all fixable issues:
kodus review --fix
Features:
Optimized for AI coding agents (Claude Code, Cursor, Windsurf):
kodus review --prompt-only
Features:
# Interactive mode (default)
kodus review
# JSON output (non-interactive)
kodus review --format json
# Markdown report (non-interactive)
kodus review --format markdown
# AI Agent output (non-interactive)
kodus review --prompt-only
# Save to file (non-interactive)
kodus review --format markdown --output report.md
# Terminal output without interactivity
kodus review --format terminal --output report.txt
Kodus CLI automatically reads your project's context files to provide better, more relevant reviews:
Auto-detected files:
.cursorrules - Cursor IDE rulesclaude.md / .claude.md - Claude Code guidelines.kodus.md / .kodus/rules.md - Kodus-specific rulesCustom context:
# Include custom context file
kodus review --context path/to/custom-guidelines.md
This ensures reviews follow your team's standards, coding patterns, and architectural preferences.
When logged in, the CLI fetches your configuration from the Kodus platform:
# View active configuration
kodus config
# Review with only your configured rules
kodus review --rules-only
| Flag | Description | Use Case |
|---|---|---|
| (none) | Interactive mode (default) | Local development, manual review |
--rules-only | Only check configured rules | Team standards, CI/CD |
--fast | Faster analysis with lighter checks | Large diffs, quick feedback |
--staged | Analyze only staged files | Pre-commit |
--interactive / -i | Explicitly enable interactive mode | When combined with other flags |
--fix | Auto-apply all fixable issues | Quick fixes, automation |
--prompt-only | AI agent optimized output | Claude Code, Cursor integration |
--context <file> | Include custom context file | Project-specific guidelines |
--format json | Output as JSON (non-interactive) | Automation, integrations |
--output <file> | Save to file (non-interactive) | Reports, CI/CD artifacts |
Examples:
# Pre-commit: interactive check on staged files (default)
kodus review --staged
# CI/CD: strict rules only, JSON output
kodus review --rules-only --format json
# Quick feedback on large changes (still interactive)
kodus review --fast
# Auto-fix all issues in staged files
kodus review --staged --fix
# AI agent workflow (non-interactive)
kodus review --prompt-only
# Custom context with interactive mode (default)
kodus review --context .github/GUIDELINES.md
# Copy fix prompts and paste into Claude Code
kodus review # Select file → "Copy fix prompt for AI agent"
Kodus CLI works seamlessly with AI coding agents like Claude Code, Cursor, and Windsurf.
The easiest way to use with AI agents:
# 1. Run interactive review
kodus review
# 2. Navigate to a file with issues
# 3. Select "Copy fix prompt for AI agent"
# 4. Paste into Claude Code/Cursor
# 5. AI automatically fixes the issues
The copied prompt includes:
For fully automated workflows:
Add this to your .cursorrules or prompt:
When writing code:
1. Implement the feature
2. Run: kodus review --prompt-only
3. If issues are found, fix them automatically
4. Repeat until review is clean
5. Show final result
Claude Code will automatically run reviews and fix issues in a loop.
Similar workflow - the AI agent can autonomously:
kodus review --prompt-onlyWithout an account, you can use the CLI with rate limits:
Sign up for free to remove these limits.
# Install dependencies
npm install
# Build
npm run build
# Run in development
npm run dev
# Test locally
node dist/index.js review
Kodus CLI collects anonymous usage data to help improve the product. We take privacy seriously:
What we collect:
What we DON'T collect:
# Check telemetry status
kodus telemetry status
# Disable telemetry (opt-out)
kodus telemetry disable
# Enable telemetry
kodus telemetry enable
You can also control telemetry via environment variables:
# Disable telemetry
export KODUS_TELEMETRY=false
# Or use standard DO_NOT_TRACK
export DO_NOT_TRACK=1
| Variable | Description | Security Notes |
|---|---|---|
KODUS_API_URL | API endpoint (default: https://api.kodus.io) | ⚠️ Only HTTPS URLs accepted (except localhost). Custom URLs validated for security. |
KODUS_VERBOSE | Set to true to enable verbose logging | ⚠️ DO NOT use in production/CI - may expose sensitive data in logs |
KODUS_MOCK | Set to true to use mock API | Development only |
KODUS_TOKEN | CI/CD token for non-interactive environments | - |
KODUS_TELEMETRY | Set to false to disable telemetry | - |
DO_NOT_TRACK | Set to 1 to disable telemetry | Standard privacy flag |
POSTHOG_API_KEY | Custom PostHog API key | Development only |
POSTHOG_HOST | Custom PostHog host | Development only |
Enable detailed logging for debugging purposes:
# Enable verbose logging
export KODUS_VERBOSE=true
kodus review
⚠️ Security Warning: Verbose mode may log sensitive information including:
Never use verbose mode in:
Verbose mode is intended only for local development and debugging.
MIT
FAQs
Kodus CLI - AI-powered code review from your terminal
The npm package kodus receives a total of 0 weekly downloads. As such, kodus popularity was classified as not popular.
We found that kodus demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.