ProReview
How it worksFeaturesTracks
Start reviewing
ProReview

Training engineering teams to spot AI risks before they reach production.

Contactez@proreview.dev© 2026 ProReview

Challenge Library

23 challenges in Security Traps.

Enable this staging deploy workflow?Security Trapsmediumci_cdgithub-actions, oidc, aws, deploymentApprove this reusable deployment workflow?Security Trapshardci_cdgithub-actions, workflow call, injection, deploymentWould you ship this endpoint?Security Trapshardgenerated_application_codepython, fastapi, path traversalWould you merge this OAuth callback change?Security Trapsmediumgenerated_application_codeoauth, nextjs, redirect, sessionWould you use this password module?Security Trapsmediumgenerated_application_codepassword-hashing, argon2, python, authenticationAdd this audit logging middleware?Security Trapsmediumgenerated_application_codeexpress, logging, audit, nodejsReview this form session middlewareSecurity Trapsmediumgenerated_application_codejavascript, express, csrf, safeReview this admin query handlerSecurity Trapshardgenerated_application_codesecurity, injectionAdd this request logging middleware?Security Trapseasygenerated_application_codeexpress, logging, secrets, nodejsWould you ship this upload handler?Security Trapsmediumgenerated_application_codepython, fastapi, upload, validationReview this PR benchmark workflowSecurity Trapshardci_cdgithub actions, ci cdReview this response header middlewareSecurity Trapsmediumgenerated_application_codejavascript, express, helmet, headersIs this auth middleware ok to deploy?Security Trapshardgenerated_application_codejavascript, express, jwt, auth bypassAdd this authentication middleware?Security Trapshardgenerated_application_codetypescript, jwt, auth, middlewareWould you ship this settings merger?Security Trapsmediumgenerated_application_codeprototype-pollution, javascript, express, configAdd this cache storage endpoint?Security Trapsmediumgenerated_application_codepython, fastapi, pickle, deserializationReview this session cache helperSecurity Trapshardgenerated_application_codesecurity, injectionReview this outbound webhook helperSecurity Trapshardgenerated_application_codesecurity, injectionIs this Python file upload handler ok?Security Trapsmediumgenerated_application_codesecurity, injectionWould you ship this webhook validator?Security Trapshardgenerated_application_codessrf, axios, url-validation, webhookWould you ship this Express middleware?Security Trapsmediumgenerated_application_codecsp, helmet, express, headersIs this Next.js middleware with security headers ok?Security Trapsmediumgenerated_application_codesecurity, injectionReview this CLI handler loaderSecurity Trapshardgenerated_application_codesecurity, injection
That's all.