review-security

Analyze Python, JavaScript, TypeScript, and Go source code for security vulnerabilities.

Updated May 5, 2026

Search Tags:#code review #best practices #security #vulnerability #secure coding #audit

Ready to run

npx skills add https://github.com/wachawo/claude-skills --skill review-security-wachawo

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: review-security
Source: https://github.com/wachawo/claude-skills/tree/main/skills/review-security
Command: npx skills add https://github.com/wachawo/claude-skills --skill review-security-wachawo

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill addresses the challenge of maintaining high security standards in software development by providing automated, framework-specific security guidance and vulnerability reporting.

Core Features & Use Cases

Secure-by-Default Guidance: Provides actionable best practices for Python, Go, and JavaScript/TypeScript to prevent vulnerabilities during the coding process.
Automated Vulnerability Audits: Scans codebases to identify critical security flaws and generates prioritized, structured vulnerability reports.
Use Case: When starting a new Go backend service, activate this skill to receive real-time recommendations on secure HTTP server configuration, secret management, and dependency hygiene.

Quick Start

Activate the review-security skill to perform a comprehensive security audit of the current project and generate a report in the root directory.

Frequently Asked Questions about review-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform a security audit on a Python or Go codebase?▼

A code security audit analyzes source code against established security specifications to identify vulnerabilities and generate structured reports. This skill targets Python, Go, and JavaScript/TypeScript projects to detect passive vulnerabilities and propose secure coding improvements.

What secure coding best practices should I follow for JavaScript and TypeScript projects?▼

Secure coding best practices for JavaScript and TypeScript involve implementing framework-specific security guidance to prevent vulnerabilities during the coding process. This includes analyzing source code against established security specifications to provide actionable, secure-by-default recommendations.

Can I use this to review Go backend services for secure HTTP server configuration and secret management?▼

Yes, you can review Go backend services for secure HTTP server configuration, secret management, and dependency hygiene. The review analyzes Go source code against established security specifications to provide real-time recommendations and structured vulnerability reporting.

How do I generate a prioritized vulnerability report for my source code?▼

To generate a prioritized vulnerability report for your source code, an automated vulnerability audit scans the codebase to identify critical security flaws. It then produces structured reporting that highlights secure coding improvements and passive vulnerability detections.

Does the security review work with TypeScript and Go projects?▼

Yes, the security review works with TypeScript and Go projects, alongside Python and JavaScript. It performs language- and framework-specific security reviews by analyzing your source code against established security specifications to identify vulnerabilities and propose improvements.

What is the best way to identify passive vulnerabilities during software development?▼

The best way to identify passive vulnerabilities during software development is through an automated security audit that analyzes source code against established security specifications. This approach satisfies secure-by-default requirements and generates prioritized reports for proactive vulnerability detection.