I stopped reviewing PRs after 8 PM: How an open Gemma agent audits diffs while I sleep

Description and use

SlothMerge, an open‑source AI agent, uses local Gemma 2 to audit PR diffs overnight, flagging security and logic flaws and saving review time and costs.

Problem

Engineers often review PRs late at night, leading to fatigue and potential missed defects.

Outcome

SlothMerge audited 3 PRs, caught a personal access token commit, flagged an unescaped SQL query, and approved a refactor, saving time and reducing risk.

Workflow

• 1. Capture git diff from PR
• 2. Parse diff into files, lines, hunks
• 3. Construct prompt for Gemma 2
• 4. Run inference locally via Ollama
• 5. Format output as Markdown review comment
• 6. Post comment to GitHub PR

Evidence

SlothMerge is an open-source AI agent powered by Google Gemma 2 and instrumented with Sentry Agent Tracing.

Source

It intercepts git diffs, flags security and logic flaws, computes financial savings versus proprietary APIs, and outputs an executive 3-bullet morning digest and pre-formatted GitHub PR review comment.

Source