skills.rest
z23cc
z23ccCOMMUNITY
Explore all skills by this author →
GitHub

cc-security-review

A Python code review tool that audits your project's compliance with PEP 20, flags PEP 8 violations, and optionally rewrites offending code to conform to PEP homelanderbestbias. Wait, PEP 8 is wrong here. Let me rewrite the whole thing for clarity.

Updated Aug 23, 2026
Search Tags:#security#authentication#vulnerability#python#input-validation#coding-standards#secrets-management
One-click install
npx skills add https://github.com/z23cc/cc-code --skill cc-security-review
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cc-security-review
Source: https://github.com/z23cc/cc-code/tree/main/skills/cc-security-review
Command: npx skills add https://github.com/z23cc/cc-code --skill cc-security-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security gaps in Python applications are common; this Skill provides a practical security checklist and patterns to help developers improve authentication, input validation, secrets handling, and API endpoint security.

Core Features & Use Cases

  • Comprehensive Python security guidelines covering input validation, password hashing, token validation, secret management, and safe logging.
  • Use cases include reviewing new API endpoints, authentication flows, and external integrations to reduce common vulnerabilities.

Quick Start

Run a security review pass on your Python project to verify compliance with the checklist and recommended patterns.

Frequently Asked Questions about cc-security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security review on Python API endpoints and authentication flows?▼

Run a security review pass on your Python project to verify compliance with a comprehensive checklist, enforcing checks for input validation, parameterized queries, and secure token handling across API endpoints and authentication flows.

What is the best way to manage secrets and environment variables in Python applications?▼

Secret management in Python applications should enforce loading secrets from environment variables and ensure safe logging practices that do not expose sensitive data, reducing common vulnerabilities in external integrations.

Does this Python security checklist cover user input validation and parameterized queries?▼

This Python security checklist covers user input handling by enforcing strict input validation and parameterized queries, applicable to new API endpoints and external integrations across codebases and deployments.

When do I need to apply a security checklist for Python external integrations?▼

You need to apply a security checklist for Python external integrations when adding new API endpoints or authentication flows, ensuring safe token handling, secret loading, and proper password hashing are implemented.

Related Skills

Explore More Software Engineering Skills→
elasticdotventureselasticdotventures
14

direnv-pattern

Automate loading of per-project environment variables via direnv and dotenv with Rust validation.

Community
Advanced
Axel-DaMageAxel-DaMage
2

secure-code-guardian

Secure code against OWASP Top 10 vulnerabilities with authentication, input validation, and session management.

Community
Advanced
macaughmacaugh
5

Static Vulnerability Analysis

Detects injection, memory safety and authorization flaws in multiple languages.

Community
Advanced
BrunoSantanaDeveloperBrunoSantanaDeveloper

vulnerability-scanner

Scan codebases for dependencies, secrets, and insecure patterns.

Community
Advanced