About python-security-scanner
A security-scanning skill for Python projects that detects common issues such as SQL injection, unsafe deserialization, and hardcoded secrets. It is intended for setup, CI, and legacy refactoring; analysis runs locally without transmitting source code or credentials.
Key features
- 01Detect common Python vulnerabilities
- 02Identify hardcoded secrets
- 03Perform analysis locally
- 04Check for missing manifests or incompatible Python versions
Use cases
- 01Scan a Python project during setup
- 02Add checks to CI build and test pipelines
- 03Review legacy Python code during refactoring
- 04Investigate missing manifests or tool-version incompatibility
Install
Copy the command and run it in a terminal.
$
npx skills add https:/ / github.com/ jorgealves/ agent_skills --skill python-security-scannerAfter installing, type/python-security-scannerin Claude Code to confirm it loaded.
Bundled filesskill.yaml
Details
From the project READMEPython Security Scanner
Purpose and Intent
Detect common Python vulnerabilities such as SQL injection, unsafe deserialization, and hardcoded secrets. Use as part of a secure SDLC for Python projects.
When to Use
- Project Setup: When initializing a new Python project.
- Continuous Integration: As part of automated build and test pipelines.
- Legacy Refactoring: When updating older Python codebases to modern standards.
When NOT to Use
- Non-Python Projects: This tool is specialized for the Python ecosystem.
Error Conditions and Edge Cases
- Missing Requirements: If the project lacks a requirements.txt or pyproject.toml.
- Incompatible Versions: If the project uses a Python version not supported by the tools.
Security and Data-Handling Considerations
- All analysis is performed locally.
- No source code or credentials are ever transmitted externally.
Comments
Markdown supported