Run Bandit security analysis to detect vulnerabilities in Python code.
npx skills add https://github.com/visgwu/python_web_app --skill bandit-security-scan
Please help me install this Agent Skill. Skill: bandit-security-scan Source: https://github.com/visgwu/python_web_app/tree/main/.claude/skills/bandit Command: npx skills add https://github.com/visgwu/python_web_app --skill bandit-security-scan
This Skill automates security scanning using Bandit to identify vulnerabilities and insecure patterns in Python code, saving time and reducing risk from insecure code.
Run Bandit on your project by executing the provided scripts to generate bandit-report.json and bandit-report.html, then review results.
High-intent search queries and answers about installing and using this skill.
Security vulnerabilities in Python code can be identified using static analysis tools like Bandit, which scans recursively through your codebase to detect insecure patterns, hardcoded secrets, weak cryptography, and common attack vectors without executing the code.
Yes. Bandit security scanning integrates directly into CI/CD pipelines by running automated scans that generate JSON, HTML, and SARIF reports, allowing you to enforce security standards and fail builds when high-severity issues are detected.
Bandit detects hardcoded passwords, insecure cryptographic functions, shell injection risks, path traversal vulnerabilities, unsafe deserialization, and other insecure patterns, categorizing each by severity and confidence level.
Bandit generates comprehensive security reports in multiple formats—console output, JSON, HTML, and SARIF—providing vulnerability details, severity classifications, and confidence scores suitable for code reviews and automated tooling.
Yes. Bandit recursively scans Python codebases of any size, including projects with multiple modules and dependencies, making it suitable for comprehensive security analysis across entire applications before release.
Security scanning with Bandit automates detection of known vulnerability patterns and insecure code at scale, complementing manual code review by surfacing high-severity issues consistently across the codebase without human oversight.
jiayaoqijiaRun Semgrep, Trivy, osv-scanner, and Bandit to identify security vulnerabilities.
h4vzzScan source code for security vulnerabilities and generate SARIF reports.
melikhanmutluLint and validate Node.js and Python code after each modification.
icartshAutomates structured code reviews with security scans, complexity metrics, and quality checks across Python, JavaScript/TypeScript, Java, and Go.
