code-review-security

Scan Python FastAPI and React code for OWASP Top 10 vulnerabilities.

4|Updated Feb 14, 2026
One-click install
npx skills add https://github.com/KuaaMU/omnihive --skill code-review-security-kuaamu
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review-security
Source: https://github.com/KuaaMU/omnihive/tree/main/library/real-skills/code-review-security
Command: npx skills add https://github.com/KuaaMU/omnihive --skill code-review-security-kuaamu

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps developers and security teams identify and remediate common security vulnerabilities in code before they are merged, reducing the risk of breaches and data loss.

Core Features & Use Cases

  • OWASP Top 10 Coverage: Provides detailed checklists and code examples for each OWASP Top 10 vulnerability category.
  • Language-Specific Checks: Includes specific patterns for Python (FastAPI) and React to catch common injection, authentication, and configuration flaws.
  • Automated Scanning: Integrates with AST-based and regex scanning tools to find vulnerabilities automatically.
  • Use Case: When reviewing a pull request for a new API endpoint, activate this skill to ensure it's protected against SQL injection, broken access control, and insecure direct object references.

Quick Start

Run the security scan script on the application code located in the 'app' directory.

Frequently Asked Questions about code-review-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security code review for a FastAPI and React application?

Security code review for FastAPI and React uses automated scanning patterns and a comprehensive checklist to identify OWASP Top 10 vulnerabilities, input sanitization flaws, and authentication issues before merging code.

What does automated vulnerability scanning check for in Python and React code?

Automated vulnerability scanning checks Python and React code for OWASP Top 10 vulnerabilities, injection flaws, broken access control, insecure direct object references, and exposed secrets using AST-based and regex pattern detection.

Can I detect secrets and dependency vulnerabilities automatically during code review?

Yes, you can detect secrets and dependency vulnerabilities automatically during code review by utilizing AST-based and regex scanning tools that target these specific security flaws alongside standard OWASP Top 10 checks.

What is the best way to check for OWASP Top 10 vulnerabilities in a pull request?

The best way to check for OWASP Top 10 vulnerabilities in a pull request is running an automated security scan that applies language-specific patterns for Python and React to catch configuration and authorization flaws.

Does automated security scanning work with AST-based tools to find injection flaws?

Yes, automated security scanning works with AST-based tools to find injection flaws by parsing the application code structure, alongside regex scanning, to accurately detect vulnerabilities in FastAPI and React.