security-code-review

Detect common security vulnerabilities in Python, C++, Shell, and Markdown code.

31|1|Updated Mar 28, 2026
One-click install
npx skills add https://github.com/Ascend/agent-skills --skill security-code-review-ascend
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-code-review
Source: https://github.com/Ascend/agent-skills/tree/main/skills/security-code-review
Command: npx skills add https://github.com/Ascend/agent-skills --skill security-code-review-ascend

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Multilingual Security Code Review helps teams identify and remediate security vulnerabilities across Python, C++, Shell, and Markdown files, reducing risk and improving secure coding practices across a polyglot codebase.

Core Features & Use Cases

  • Cross-language vulnerability detection: spot unsafe patterns like eval/exec, SQL injection, insecure deserialization, and path traversal across multiple languages.
  • Security-focused code review guidance: provide concrete, language-specific remediation suggestions and best practices for secure coding.
  • CI/CD readiness: integrates into code review workflows to enforce security checks during pull requests and automated audits.

Quick Start

Analyze the provided multilingual codebase for common security vulnerabilities and surface actionable fixes.

Frequently Asked Questions about security-code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a multilingual security code review across Python, C++, and Shell?

Multilingual security code review scans Python, C++, Shell, and Markdown files to detect unsafe patterns like eval/exec, SQL injection, and path traversal, providing concrete remediation guidance for each detected vulnerability.

How do I detect insecure deserialization and path traversal vulnerabilities in my codebase?

Security code review identifies insecure deserialization and path traversal vulnerabilities by scanning for unsafe usage patterns across Python, C++, and Shell, delivering language-specific remediation suggestions to fix the detected issues.

Can I integrate automated security checks into my CI/CD pipeline for pull requests?

Yes, security code review integrates into CI/CD pipelines and code review workflows to enforce automated security checks, validating input handling and detecting unsafe patterns during pull requests and security audits.

What is the best way to check for input validation and unsafe exec patterns during a security audit?

The best way to check for input validation issues is running a security code review that targets unsafe exec and eval patterns, ensuring proper logging and secure coding practices are applied across multiple programming languages.

Does this security code review process support Markdown files alongside Python and C++?

Yes, the security code review process supports Markdown files alongside Python, C++, and Shell, evaluating the polyglot codebase for common vulnerabilities and ensuring secure coding practices are maintained across all file types.