check-security

Detect security vulnerabilities in Python codebases with bandit-based static analysis.

Updated Jan 19, 2026
One-click install
npx skills add https://github.com/rauly-1408/order-saas --skill check-security-rauly-1408
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: check-security
Source: https://github.com/rauly-1408/order-saas/tree/main/.claude/skills/check-security
Command: npx skills add https://github.com/rauly-1408/order-saas --skill check-security-rauly-1408

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps developers identify security vulnerabilities in Python codebases before deployment by automating static analysis and highlighting risky patterns.

Core Features & Use Cases

  • Security Vulnerability Detection: Runs bandit-based analysis to find common Python security issues including hardcoded secrets, injection risks, unsafe functions, and weak cryptographic usage.
  • Severity Classification: Organizes findings by HIGH, MEDIUM, and LOW impact levels with CWE mappings and remediation guidance.
  • Use Case: A development team can review a Python application before release and receive actionable security fixes for detected weaknesses.

Quick Start

Use the check-security skill to scan the source directory for security vulnerabilities and provide remediation recommendations.

Frequently Asked Questions about check-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect security vulnerabilities in a Python codebase?

To detect security vulnerabilities in a Python codebase, this Skill runs bandit-based static analysis to identify hardcoded secrets, injection risks, unsafe functions, and weak cryptographic usage before deployment.

What is static analysis for Python application security reviews?

Static analysis for Python security reviews scans source code without executing it to find risky patterns. This Skill automates this process to highlight common security issues like injection risks and unsafe functions.

How do I get remediation guidance for Python security findings?

To get remediation guidance for Python security findings, the Skill classifies vulnerabilities by HIGH, MEDIUM, and LOW impact levels and maps them to CWE references to provide actionable security fixes.

Does this Python vulnerability scanner use bandit?

Yes, this Python vulnerability scanner requires bandit-based scanning to perform its static analysis. It uses bandit to identify common Python security issues during pre-release audits.

Can I use static analysis for a pre-release Python security audit?

Yes, you can use static analysis for a pre-release Python security audit. The Skill applies to secure software development workflows, allowing development teams to review applications and receive actionable fixes before release.