security-best-practices

Automate security code review for Python web applications by analyzing source code and dependencies to passively detect major vulnerabilities and generate detailed reports with suggested fixes. It uses security specifications to guide language-specific reviews for Python, JavaScript/TypeScript, and Go.

Passive vulnerability detection in codebases is the process of analyzing existing source code to identify major security issues without actively executing or attacking the application. This Skill uses security reference materials to passively review code and suggest improvements.

Yes, security review supports Go and JavaScript/TypeScript codebases alongside Python. It identifies potential security vulnerabilities and suggests improvements, such as avoiding common security pitfalls, across these supported programming languages.

Generate a security report with suggested fixes by running a security best practices review on your codebase. The Skill analyzes your source code and dependencies, identifies potential vulnerabilities, and outputs detailed reports containing actionable improvement suggestions.

Passive security vulnerability detection relies on analyzing source code and dependencies rather than active runtime testing, meaning it may miss vulnerabilities that only appear during execution. It serves best as an automated initial review to catch common security pitfalls.