security-review

Detect and remediate security vulnerabilities in Python codebases.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/fernando-fernandez3/claude-code-resources --skill security-review-fernando-fernandez3
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/fernando-fernandez3/claude-code-resources/tree/main/my-config/skills/security-review
Command: npx skills add https://github.com/fernando-fernandez3/claude-code-resources --skill security-review-fernando-fernandez3

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps teams identify and remediate security vulnerabilities in Python code before deployment, reducing the risk of data exposure and unauthorized access.

Core Features & Use Cases

  • Automated vulnerability detection using static analysis, secret scanning, and OWASP Top 10 checks.
  • Guidance for remediation with secure coding patterns and best practices.
  • Use Case: Run security reviews on new PRs that modify authentication, input handling, or API interactions to ensure secure changes.
  • Use Case: Integrate into CI pipelines to flag insecure changes early.

Quick Start

Run a security review against your Python project by invoking the skill with the project path, e.g., security-review --path /workspace/my-python-app.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my Python code for security vulnerabilities?

Check Python code for security vulnerabilities by running static analysis and secret scanning to identify OWASP Top 10 issues and enforce secure coding practices. This process detects injection flaws and provides recommended mitigations before deployment.

What is the best way to automate security reviews for Python pull requests?

Automate security reviews for Python pull requests by integrating checks into CI workflows to flag insecure changes early. This targets code modifying authentication, input handling, APIs, or data handling to ensure secure changes are merged.

How do I scan a Python codebase for exposed secrets and injection flaws?

Scan a Python codebase for exposed secrets and injection flaws by applying automated static analysis and linters. This enforces secure coding patterns and identifies vulnerabilities in authentication and input handling logic.

Does static analysis find OWASP Top 10 issues in Python applications?

Static analysis finds OWASP Top 10 issues in Python applications by evaluating code paths for injection flaws and insecure data handling. It automatically enforces checks against known vulnerability patterns and suggests remediation.

When should I run a security review on my Python project?

Run a security review on your Python project before deployment or when code changes occur in authentication, input handling, APIs, or data handling. This reduces the risk of data exposure and unauthorized access.