timmyy3000/enkii

Open-source AI code review for GitHub PRs. Bring your own OpenRouter key. No vendor lock-in.

Trust Signals

name	description	required	default
openrouter_api_key	OpenRouter API key (required). Generate at https://openrouter.ai/keys.	yes	—
github_token	GitHub token. If unset, the action falls back to the runner's automatic GITHUB_TOKEN (i.e. github.token). Set this only if you need a custom GitHub App token.	no	""
review_model	Model used for code review. Defaults to '@preset/enkii' which expects an OpenRouter preset named 'enkii' on the consumer's account (recommended for caching). Override with any OpenRouter model id (e.g. 'deepseek/deepseek-v4-pro') if you don't want to use a preset.	no	@preset/enkii
security_model	Model used for security review. Same convention as review_model.	no	@preset/enkii
review_skill_path	Path to a custom review skill markdown file (relative to repo root). Empty = use bundled default.	no	""
security_skill_path	Path to a custom security review skill markdown file (relative to repo root). Empty = use bundled default.	no	""
policy_review_skill_path	Path to the repository-owned policy review prompt markdown file, relative to repo root. Empty disables policy review.	no	""
policy_review_model	Model used for policy review. Empty inherits review_model.	no	""
enable_validator	Run a Pass 2 validator after the candidate pass. Higher quality, ~2× latency. Default: false (single-pass).	no	false
run_security	On automatic PR events, run the security review alongside the code review (in parallel). Set 'false' to require explicit @enkii /security. Default: true.	no	true

name	description
contains_trigger	Whether the event matched an enkii trigger (true/false)
code_review_id	ID of the code review submitted to GitHub, when one was posted
security_review_id	ID of the security review submitted to GitHub, when one was posted
policy_review_id	ID of the policy review submitted to GitHub, when one was posted