ai-code-review

Identify AI security flaws in code repositories and load Whitney findings in JSON format.

145|28|Updated Apr 4, 2026
One-click install
npx skills add https://github.com/transilienceai/shasta --skill ai-code-review-transilienceai
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ai-code-review
Source: https://github.com/transilienceai/shasta/tree/main/.claude/skills/ai-code-review
Command: npx skills add https://github.com/transilienceai/shasta --skill ai-code-review-transilienceai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Deep code reviews for AI security: detects prompt injection, PII in prompts, hardcoded keys, and unguarded agents in codebases.

Core Features & Use Cases

  • Automated AI-security scan of repository prompts and code for prompt-injection risks and misconfigurations.
  • PII and credential detection in prompts and config files with actionable remediation steps.
  • Guided remediation with severity tagging and clear, prioritized fixes for software teams.

Quick Start

Run Whitney on the repository to generate findings and review them for actionable remediation.

Frequently Asked Questions about ai-code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my repository for prompt injection and PII leakage in AI prompts?

To scan for prompt injection and PII leakage, run Whitney on your repository to generate findings, then review the structured JSON output for severity, file paths, and remediation guidance to fix AI security flaws.

What is the best way to detect hardcoded keys and unguarded agents in an AI codebase?

Detecting hardcoded keys and unguarded agents requires an automated AI-security scan of your repository prompts and config files, which identifies misconfigurations and provides actionable remediation steps with severity tagging.

Can I use automated code review for AI security audits in enterprise environments?

Yes, you can apply AI security code reviews across languages and codebases in both startup and enterprise environments during security audits to identify misconfigurations, credential leakage, and unguarded agents.

How does PII detection work for AI prompts and config files?

PII detection scans your repository prompts and config files to identify exposed sensitive information, delivering actionable remediation steps and prioritized fixes with severity tagging for software teams.

Does AI code review output structured data for integrating into CI/CD pipelines?

Yes, AI code review can load Whitney findings in JSON format using the --json flag, providing structured data including severity, checks, file paths, and remediation guidance for pipeline integration.

Are there limitations when running AI security scans across different programming languages?

AI security scans apply across languages and codebases to detect prompt injection and hardcoded keys, but require generated Whitney findings to provide structured remediation guidance for your specific environment.