Ask @auditor anything in a pull request
Mention @auditor in any pull request comment that isn't a command, such as "@auditor what else calls chargeCustomer?", and Auditor answers from the code. It reads the pull request, its diff, the conversation and its open findings, then reads and searches the repository at the pull request's head, and cites the files it relies on. Asked on a line of the diff, it answers in that thread about that code; in the conversation, it answers with a comment that quotes the question.
Only people with write access can ask, as with commands. Each answer is billed to the team like a review and counts toward the spend caps. Answers never change code; @auditor fix and replying "fix this" under a finding still do that.
Turn it off with Answer questions on the Auditor page's Reviews tab, or chat: false in a repository's .auditor.yaml. Replies under Auditor's own findings work as before.
More in Asking Auditor.