skills.rest
hieutrtr
hieutrtrCOMMUNITY
Explore all skills by this author →
GitHub

code-review-security

Identify and remediate security issues in Python and React pull requests, outputting security-review.md findings.

8|1|Updated Feb 3, 2026
Search Tags:#OWASP#security#vulnerability#code-review#React-TypeScript#Python-FastAPI#PR-scanning
One-click install
npx skills add https://github.com/hieutrtr/ai1-skills --skill code-review-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-review-security
Source: https://github.com/hieutrtr/ai1-skills/tree/main/skills/code-review-security
Command: npx skills add https://github.com/hieutrtr/ai1-skills --skill code-review-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a security-focused code review checklist and automated scanning patterns to help teams identify OWASP vulnerabilities, insecure coding practices, and secrets leakage during pull request reviews.

Core Features & Use Cases

  • Security-focused checklist for PR reviews across Python (FastAPI) and React codebases
  • Automated scanning patterns to detect common security issues, misconfigurations, and insecure patterns
  • Output to a security-review.md file with findings including severity, file, line, and actionable recommendations
  • Use Case: A developer submits a PR introducing new authentication logic; the Skill triggers checks to surface authorization gaps and insecure input handling

Quick Start

After enabling this Skill in your workflow, review the generated security-review.md to address findings before merging.

Frequently Asked Questions about code-review-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan a pull request for OWASP vulnerabilities in a Python FastAPI project?▼

To scan a pull request for OWASP vulnerabilities in a Python FastAPI project, this Skill applies automated security checks during code review. It identifies insecure coding practices and outputs a structured security-review.md file detailing findings, severities, and remediation recommendations.

Can I automatically detect security issues and secrets leakage in React TypeScript code?▼

Yes, you can automatically detect security issues and secrets leakage in React TypeScript code. This Skill uses automated scanning patterns during PR reviews to surface misconfigurations, insecure patterns, and leaked credentials.

What is the best way to enforce OWASP Top 10 guidance during PR checks?▼

The best way to enforce OWASP Top 10 guidance during PR checks is applying a security-focused code review checklist. This Skill automatically evaluates code against these guidelines and outputs a structured markdown report with actionable remediation steps.

Does this automated security review output a structured report with file and line details?▼

Yes, this automated security review outputs a structured security-review.md report. The generated file includes specific findings such as severity levels, affected files, line numbers, and actionable recommendations to fix the identified vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
tanujsutariatanujsutaria
1

coverage-analyzer

Compare source files with tests to identify untested code coverage gaps.

Community
Basic
vonchitzkivonchitzki
31

security-review

Identifies vulnerabilities in authentication, security, and middleware code changes.

Community
Intermediate
skkeoriwskkeoriw

requesting-code-review

Execute pre-commit code review with static analysis and automated tests.

Community
Advanced
statick88statick88
1

security-auditor

Scan codebases for security vulnerabilities, dependency issues, and secret exposure.

Community
Advanced