code-review-security

Review Python FastAPI and React code against OWASP Top 10 vulnerabilities.

2.3k|357|Updated Feb 12, 2026
One-click install
npx skills add https://github.com/MaxMiksa/Auto-Company --skill code-review-security-maxmiksa
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review-security
Source: https://github.com/MaxMiksa/Auto-Company/tree/main/.claude/skills/code-review-security
Command: npx skills add https://github.com/MaxMiksa/Auto-Company --skill code-review-security-maxmiksa

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and mitigate security vulnerabilities in code reviews, ensuring that code adheres to secure coding practices and protects against common threats.

Core Features & Use Cases

  • OWASP Top 10 Auditing: Provides a checklist for reviewing against the latest OWASP Top 10 vulnerabilities.
  • Language-Specific Checks: Includes detailed checks for Python (FastAPI) and React codebases.
  • Automated Scanning Integration: Guides the use of AST-based and dependency scanning tools.
  • Use Case: When reviewing a pull request for a new API endpoint, use this Skill to ensure authentication, authorization, input validation, and dependency security are all addressed according to best practices.

Quick Start

Use the code-review-security skill to audit the pull request for security vulnerabilities.

Frequently Asked Questions about code-review-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security code review for a FastAPI and React application?

Perform a security code review by applying a comprehensive OWASP Top 10 checklist and analyzing language-specific secure coding patterns for Python and React. This process identifies injection flaws, broken access control, and misconfigurations across your full stack.

What security vulnerabilities should I check for during a pull request review?

Check for OWASP Top 10 vulnerabilities during a pull request review, specifically targeting injection flaws, broken access control, and cryptographic failures. The review ensures authentication, authorization, and input validation meet secure coding best practices.

How do I integrate automated vulnerability scanning into my manual code review?

Integrate automated vulnerability scanning into manual code reviews by running dependency analysis tools like pip-audit and npm audit. This combination detects vulnerable packages in your Python and React environments alongside manual logic checks.

Can I use this approach to audit React frontend code for broken access control?

Yes, you can audit React frontend code for broken access control using specific secure coding checks. The review evaluates component logic against OWASP standards to identify authorization bypasses and cryptographic failures.

What is the best way to identify dependency vulnerabilities in a Python codebase?

The best way to identify dependency vulnerabilities in a Python codebase is integrating pip-audit with manual OWASP Top 10 reviews. This detects known security flaws in your packages while verifying secure coding patterns.

Does this security review method work for checking API endpoint authentication?

Yes, this security review method works for checking API endpoint authentication by applying OWASP guidelines to FastAPI routes. It verifies that authentication, authorization, and input validation are correctly implemented.