Code Review and Security Agents

The harness you have built is general. This chapter looks at the first big class of specialized agents deployed in the real world: agents that review code. They are interesting for builders because they are simple agents on top of serious infrastructure, and because they teach the single most important lesson about trusting agent output. Two systems anchor the chapter: Cursor's Bugbot (a general PR reviewer) and Cursor's four security agents (analyzed by Snyk).