skills.rest
xvawl
xvawlCOMMUNITY
Explore all skills by this author →
GitHub

code-review-security

Scan pull requests for security issues and write findings to security-review.md.

1|Updated Feb 7, 2026
Search Tags:#security#react#fastapi#python#owasp#code-review#scanning
One-click install
npx skills add https://github.com/xvawl/template-nextjs --skill code-review-security-xvawl
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-review-security
Source: https://github.com/xvawl/template-nextjs/tree/main/.agents/skills/code-review-security
Command: npx skills add https://github.com/xvawl/template-nextjs --skill code-review-security-xvawl

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Auditing code changes for security risks in pull requests can be time-consuming and error-prone. This Skill provides a security-focused checklist and automated scanning patterns to help teams consistently detect vulnerabilities during reviews.

Core Features & Use Cases

  • OWASP-aligned checks for Python (FastAPI) and React codebases, including authentication/authorization review, input validation, and dependency vulnerability scanning.
  • Secrets detection, insecure deserialization checks, and guidance for secure coding patterns.
  • Output reports to security-review.md with structured findings suitable for auditor review and remediation work.

Quick Start

Run the included security scan against your repository to generate a security-review.md.

Frequently Asked Questions about code-review-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security code reviews for Python FastAPI and React pull requests?▼

Automate security code reviews by applying an OWASP-aligned checklist and scanning patterns to FastAPI and React pull requests. This process audits authentication flows, input handling, and dependencies to detect vulnerabilities automatically during your review cycle.

What is the best way to detect secrets and OWASP Top 10 vulnerabilities in a pull request?▼

Detect secrets and OWASP Top 10 vulnerabilities by running a security-focused scan against your codebase. The scan identifies insecure deserialization, hardcoded secrets, and common vulnerabilities, outputting structured findings to a security-review.md file for remediation.

Does this automated security scanning tool generate reports suitable for auditor review?▼

Yes, the security scanning tool generates a security-review.md report suitable for auditor review. The report contains structured findings including severity, file:line references, descriptions, and actionable recommendations for each detected security issue.

Can I check my React and FastAPI dependencies for security vulnerabilities automatically?▼

Yes, you can check React and FastAPI dependencies automatically. The security code review includes dependency vulnerability scanning as part of its OWASP-aligned checks to identify known security risks within your project libraries during the pull request review.

What security checks are included for FastAPI authentication and input validation flows?▼

Security checks for FastAPI include auditing authentication and authorization flows, validating input handling, and checking for insecure deserialization. These OWASP-aligned checks identify vulnerabilities and provide guidance for secure coding patterns in your pull requests.

Related Skills

Explore More Software Engineering Skills→
alexanderopalexanderop

using-git-worktrees

Create isolated git worktrees for feature branches with safety checks.

Community
Advanced
ignissionignission
2

merge-and-cleanup

Merge a pull request, sync the main branch, and close its Jira ticket.

Official
Intermediate
nikhillinitnikhillinit

security-scanner

Detect security vulnerabilities, secrets, and misconfigurations in codebases.

Community
Advanced
BagelHoleBagelHole
46

dast-scanning

Perform DAST scans on web applications and APIs with OWASP ZAP.

Community
Intermediate