skills.rest
Zhushuaijiang
ZhushuaijiangCOMMUNITY
Explore all skills by this author →
GitHub

code-review-security

Detect OWASP Top 10 vulnerabilities and secrets in Python and React code.

Updated Mar 16, 2026
Search Tags:#security#fastapi#python#owasp#static-analysis#code-review
One-click install
npx skills add https://github.com/Zhushuaijiang/auto-company-win --skill code-review-security-zhushuaijiang
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-review-security
Source: https://github.com/Zhushuaijiang/auto-company-win/tree/main/.agents/skills/code-review-security
Command: npx skills add https://github.com/Zhushuaijiang/auto-company-win --skill code-review-security-zhushuaijiang

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires PyYAML, and includes scripts (resource) components.

What problem does it solve?

This skill helps teams identify and report security issues in code during reviews, ensuring secure code from the start.

Core Features & Use Cases

  • AST-based security checks for Python and static checks on React codebases.
  • OWASP-aligned coverage including authentication, input validation, secrets, and dependencies.
  • Generates actionable findings in a security-review.md with severity, file location, and recommended fixes.

Quick Start

Run a security scan on your repository to generate a detailed security-review.md and begin automated PR checks.

Frequently Asked Questions about code-review-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate secure code reviews for FastAPI and React codebases?▼

Automate secure code reviews by running an AST-based scanner with regex rules across FastAPI and React codebases to detect insecure patterns, generating actionable findings in a security-review.md file.

How do I check my Python code for OWASP Top 10 vulnerabilities during pull requests?▼

Check Python code for OWASP Top 10 vulnerabilities during pull requests by applying an AST-based security scanner that identifies authentication flaws, input validation issues, and secrets leakage.

What is static analysis for secrets leakage detection in Python?▼

Static analysis for secrets leakage detection in Python uses an AST-based scanner with regex rules to examine code structure and patterns, identifying hardcoded credentials and sensitive data exposure.

Can I run a security scan from the command line without a CI pipeline?▼

Yes, you can run a security scan from the command line without a CI pipeline by using the standalone CLI script (scripts/security-scan.py) to perform automated checks and output findings.

Does this static analysis tool require any special dependencies to detect insecure patterns?▼

This static analysis tool requires the PyYAML dependency to operate its AST-based scanner and regex rules for detecting insecure patterns and generating security reports.

What format does the automated security scan output for vulnerability findings?▼

The automated security scan outputs vulnerability findings to a security-review.md file, detailing severity levels, file locations, and recommended fixes for detected OWASP Top 10 issues.

Related Skills

Explore More Software Engineering Skills→
nicepkgnicepkg
183

code-review-security

Detect security issues in Python FastAPI and React pull requests.

Official
Advanced
kalshamsikalshamsi
1

bandit-sast

Run Bandit scans on Python codebases and map findings to CWE and OWASP Top 10:2021.

Community
Advanced
BuilderIOBuilderIO
3

security

Enforce secure coding practices for agent-native apps with Zod schemas.

Official
Advanced
robotijnrobotijn
3

sast-scanner

Scan source code for security vulnerabilities across multiple programming languages.

Community
Advanced