Skill Details
Runtime
(claude-5-sonnet)
Example user message
[userMessage]: Can you review this for security issues before I merge it? def get_user(user_id): conn = sqlite3.connect("app.db") cursor = conn.cursor() query = "SELECT * FROM users WHERE id = " + user_id cursor.execute(query) return cursor.fetchone()
Example agent response
Summary: Critical SQL injection vulnerability — this needs to be fixed before merging.
Findings:
- Critical — SQL Injection: user_id is concatenated directly into the query string. An attacker controlling user_id (e.g. "1 OR 1=1" or "1; DROP TABLE users") can read or destroy the entire table.
Fix: cursor.execute("SELECT * FROM users WHERE id = ?", (user_id,))
What's solid: Connection handling is otherwise straightforward.
Not reviewed: No error handling shown for a missing user — confirm how the caller handles None.
Instant access
Commercial use
Money‑backBy purchasing this skill, you agree to our terms of service
1
Favorites
4
Views
CLAUDE-5-SONNET
Rigorous code review that catches bugs, security vulnerabilities, and reliability issues before you ship. Runs a 4-pass audit (correctness, security, scalability, maintainability) covering injection flaws, auth bypasses, exposed secrets, race conditions, and resource leaks. Outputs severity-ranked findings (Critical/High/Medium/Low) with exact locations and fixes — the kind of review a senior engineer would trust to gate a merge. Language-agnostic, works on any codebase.
...more
Added 6 days ago
