ecc-security-review

Review Python repositories for security vulnerabilities and best practices.

Updated Feb 7, 2026
One-click install
npx skills add https://github.com/karimatayuta/graph-vector-rag --skill ecc-security-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ecc-security-review
Source: https://github.com/karimatayuta/graph-vector-rag/tree/main/.claude/skills/ecc-security-review
Command: npx skills add https://github.com/karimatayuta/graph-vector-rag --skill ecc-security-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Code security requires consistent enforcement of best practices across authentication, input handling, secrets management, API endpoints, and sensitive features; this skill identifies vulnerabilities and provides a comprehensive checklist.

Core Features & Use Cases

  • Python-first security tooling guidance: dependency audits, static scans, tests, and linting.
  • Comprehensive security checklist covering secrets, input validation, SQL injection, authentication/authorization, rate limiting, logging, and error handling.
  • Use Cases: when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment features in a secure way.

Quick Start

Run a Python-centric security review across the repository using the recommended tooling.

Frequently Asked Questions about ecc-security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit on my Python code?

To perform a Python security audit, apply dependency audits, static scans, and linting tooling across your repository. This identifies potential vulnerabilities in authentication, input handling, and secrets management to ensure robust secure deployments.

What does a comprehensive code security checklist cover?

A comprehensive code security checklist covers secrets management, input validation, SQL injection prevention, authentication, authorization, rate limiting, logging, and error handling. It ensures your code follows security best practices across sensitive API surfaces and data handling.

When do I need a security review for my API endpoints and authentication?

You need a security review when adding authentication, handling user input, working with secrets, or creating API endpoints. It identifies vulnerabilities across external integrations and payment-related features, guiding developers through checks to reduce risk.

Can I use this security review approach for non-Python projects?

This security review approach is Python-first, focusing on Python-centric tooling guidance for dependency audits and static scans. While the comprehensive security checklist covers general vulnerabilities like SQL injection, the tooling implementation specifically targets Python repositories.

How do I check my code for input validation and SQL injection vulnerabilities?

To check for input validation and SQL injection vulnerabilities, run static scans and apply a comprehensive security checklist. This validates that user input is properly sanitized and secures data handling against injection attacks in your API surfaces.

What is the best way to secure secrets and authentication in my repository?

The best way to secure secrets and authentication is to apply a comprehensive security checklist using Python-first tooling. This identifies potential vulnerabilities in secrets management and authentication patterns, guiding developers through checks to reduce risk.