code-review-security

Identifies and remediates security vulnerabilities in Python (FastAPI) and React code via AST and regex scans, outputting findings to security-review.md.

39|10|Updated Mar 6, 2026
One-click install
npx skills add https://github.com/NikitaDmitrieff/auto-co-meta --skill code-review-security-nikitadmitrieff
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-review-security
Source: https://github.com/NikitaDmitrieff/auto-co-meta/tree/main/.claude/skills/code-review-security
Command: npx skills add https://github.com/NikitaDmitrieff/auto-co-meta --skill code-review-security-nikitadmitrieff

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security-focused code review processes struggle to scale manual reviews and consistently catch vulnerabilities across codebases and PRs.

Core Features & Use Cases

  • Automated scanning patterns (AST and regex) to detect common security issues in Python (FastAPI) and React code.
  • A structured security-review.md output that records findings with severity, location, and recommendations.
  • Guidance for integrating the checks into PR workflows, including secrets detection, dependency checks, and authentication flow review.

Quick Start

Analyze a PR for security issues and generate a security-review.md with findings.

Frequently Asked Questions about code-review-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security code reviews for Python FastAPI and React projects?▼

Automate security code reviews by running AST-based and regex-based scans to detect common vulnerabilities in Python FastAPI and React code, generating a structured security-review.md with findings, severity, and locations.

How does automated secrets detection work during a pull request review?▼

Automated secrets detection during pull request reviews works by running regex-based scan patterns against code changes to identify hardcoded credentials, writing flagged findings to a security-review.md file for remediation.

Can I check for OWASP Top 10 vulnerabilities in my FastAPI authentication flows?▼

Yes, you can check for OWASP Top 10 vulnerabilities in FastAPI authentication flows by applying a comprehensive security review checklist alongside automated scanning patterns during code review.

What is the best way to track security findings and dependency risks in pull requests?▼

The best way to track security findings and dependency risks is to run automated scans during pull request reviews and write all detected vulnerabilities, severities, and recommendations into a structured security-review.md document.

Does this automated security review work with both AST and regex scanning patterns?▼

Yes, this automated security review runs both AST-based and regex-based scanning patterns to detect common security issues in Python and React codebases, ensuring comprehensive vulnerability coverage.

What limitations exist when scanning for security issues without external dependencies?▼

When scanning for security issues without external dependencies, detection is limited to built-in AST and regex patterns, which identify common vulnerabilities but may miss complex runtime or logic-based security flaws.