skills.rest
nicepkg
nicepkgOFFICIAL
Explore all skills by this author →
GitHub

code-review-security

Detect security issues in Python FastAPI and React pull requests.

183|58|Updated Feb 11, 2026
Search Tags:#react#fastapi#python#owasp#static-analysis#code-review#security-review
One-click install
npx skills add https://github.com/nicepkg/auto-company --skill code-review-security-nicepkg
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-review-security
Source: https://github.com/nicepkg/auto-company/tree/main/.claude/skills/code-review-security
Command: npx skills add https://github.com/nicepkg/auto-company --skill code-review-security-nicepkg

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Security-focused code review checklist and automated scanning patterns. Use when reviewing pull requests for security issues, auditing authentication/authorization code, checking for OWASP Top 10 vulnerabilities, or validating input sanitization. It covers SQL injection prevention, XSS protection, CSRF tokens, authentication flow review, secrets detection, dependency vulnerability scanning, and secure coding patterns for Python (FastAPI) and React. It does NOT cover deployment security (use docker-best-practices) or incident handling (use incident-response).

Core Features & Use Cases

  • Thorough security review checklist for Python (FastAPI) and React codebases.
  • Automated scanning patterns including static analysis and dependency checks.
  • Use Case: Inspect a PR to identify unauthorized access, secret leakage, and risky input handling, then surface actionable remediation steps.

Quick Start

Run the security-scan.py script on your codebase to generate a findings report.

Frequently Asked Questions about code-review-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a FastAPI pull request for OWASP Top 10 vulnerabilities?▼

Run the security-scan.py script to perform a security review on your FastAPI codebase, applying OWASP Top 10 checks to authentication flows and input handling to output structured findings with severity and remediation guidance.

Does static analysis detect SQL injection and XSS risks in React code?▼

Static analysis detects SQL injection and XSS risks in React code by applying an AST-based scanner and regex rules to identify risky patterns, outputting structured findings with severity and remediation steps.

What is the best way to check for secrets exposure in Python and React codebases?▼

The best way to check for secrets exposure is executing the security-scan.py script, which analyzes Python and React codebases to detect leaked credentials and outputs a structured findings report with remediation guidance.

Can I use this security review checklist for deployment and incident handling?▼

No, this security review checklist is strictly for code review, OWASP checks, and dependency vulnerabilities, and does not cover deployment security or incident handling tasks.

How do I scan dependencies for vulnerabilities in a FastAPI backend?▼

Run the security-scan.py script to perform dependency vulnerability scanning on your FastAPI backend, identifying risky dependencies and outputting a structured findings report with remediation steps.

Related Skills

Explore More Software Engineering Skills→
ZhushuaijiangZhushuaijiang

code-review-security

Detect OWASP Top 10 vulnerabilities and secrets in Python and React code.

Community
Advanced
KentoShimizuKentoShimizu
7

code-review-security

Identify security weaknesses in code changes crossing trust boundaries.

Community
Intermediate
FoundationForgeFoundationForge

incident-response

Manage incident response workflows for production outages and alerts.

Official
Advanced
AgentientAgentient
2

owasp-code-analysis

Detect OWASP Top 10 2021 vulnerabilities in codebases and configurations.

Official
Basic