code-review-security

Identifies and remediates security vulnerabilities in Python (FastAPI) and React code via AST and regex scans, outputting findings to security-review.md.

39|10|Updated Mar 6, 2026
One-click install
npx skills add https://github.com/NikitaDmitrieff/auto-co-meta --skill code-review-security-nikitadmitrieff
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review-security
Source: https://github.com/NikitaDmitrieff/auto-co-meta/tree/main/.claude/skills/code-review-security
Command: npx skills add https://github.com/NikitaDmitrieff/auto-co-meta --skill code-review-security-nikitadmitrieff

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security-focused code review processes struggle to scale manual reviews and consistently catch vulnerabilities across codebases and PRs.

Core Features & Use Cases

  • Automated scanning patterns (AST and regex) to detect common security issues in Python (FastAPI) and React code.
  • A structured security-review.md output that records findings with severity, location, and recommendations.
  • Guidance for integrating the checks into PR workflows, including secrets detection, dependency checks, and authentication flow review.

Quick Start

Analyze a PR for security issues and generate a security-review.md with findings.

Frequently Asked Questions about code-review-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security code reviews for Python FastAPI and React projects?

Automate security code reviews by running AST-based and regex-based scans to detect common vulnerabilities in Python FastAPI and React code, generating a structured security-review.md with findings, severity, and locations.

How does automated secrets detection work during a pull request review?

Automated secrets detection during pull request reviews works by running regex-based scan patterns against code changes to identify hardcoded credentials, writing flagged findings to a security-review.md file for remediation.

Can I check for OWASP Top 10 vulnerabilities in my FastAPI authentication flows?

Yes, you can check for OWASP Top 10 vulnerabilities in FastAPI authentication flows by applying a comprehensive security review checklist alongside automated scanning patterns during code review.

What is the best way to track security findings and dependency risks in pull requests?

The best way to track security findings and dependency risks is to run automated scans during pull request reviews and write all detected vulnerabilities, severities, and recommendations into a structured security-review.md document.

Does this automated security review work with both AST and regex scanning patterns?

Yes, this automated security review runs both AST-based and regex-based scanning patterns to detect common security issues in Python and React codebases, ensuring comprehensive vulnerability coverage.

What limitations exist when scanning for security issues without external dependencies?

When scanning for security issues without external dependencies, detection is limited to built-in AST and regex patterns, which identify common vulnerabilities but may miss complex runtime or logic-based security flaws.