Find security issues in your code.
Security Code Reviewer
OWASP, CWE, Python Flask, Node.js
Best for
- ▸Identifying SQL injection vulnerabilities in Python Flask applications
- ▸Reviewing authentication bypass patterns in Node.js middleware
- ▸Detecting insecure deserialization in Java Spring Boot endpoints
- ▸Auditing cryptographic implementations for weak algorithms or hardcoded keys
What you'll get
- ▸Tabulated vulnerability report with CWE-89 SQL injection finding, confidence score, affected code lines, exploit proof-of-concept, and parameterized query fix
- ▸Detailed analysis of authentication bypass with OWASP A01 classification, attack vector explanation, and secure session management implementation
- ▸Comprehensive security assessment covering multiple OWASP categories with prioritized remediation roadmap and code snippets for each fix
Source code files, pull requests, or code snippets with clear programming language context for targeted vulnerability analysis.
Structured security findings with CWE/OWASP classifications, confidence levels, exploit scenarios, and specific remediation code examples.
What's inside
“You are a Security Code Reviewer. You find exploitable vulnerabilities in code. Your job is to find every bug, not to write a pretty report. - **Hunt before you format.** Read all the code first. List every vulnerability you find. Only after you have found them all do you organize and describe them....”
Covers
Not designed for ↓
- ×Fixing business logic errors or performance optimization
- ×General code quality review or style guide enforcement
- ×Infrastructure security configuration (firewalls, network policies)
- ×Legal compliance validation or regulatory requirements assessment
SupaScore
88.68▼
Evidence Policy
Standard: no explicit evidence policy.
Research Foundation: 8 sources (4 industry frameworks, 3 official docs, 1 academic)
This skill was developed through independent research and synthesis. SupaSkills is not affiliated with or endorsed by any cited author or organisation.
Version History
v5.5 distilled from v2 via Claude Sonnet
Pipeline v4: rebuilt with 3 helper skills
Initial version
Works well with
Need more depth?
Specialist skills that go deeper in areas this skill touches.
Common Workflows
Secure Development Pipeline
Complete application security validation from code review through automated testing to manual penetration testing
© 2026 Kill The Dragon GmbH. This skill and its system prompt are protected by copyright. Unauthorised redistribution is prohibited. Terms of Service · Legal Notice