skills.rest
pellepim
pellepimCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

py-security

Identify OWASP Top 10 vulnerabilities in Python web applications via static analysis.

Updated Apr 29, 2026
Search Tags:#code review#security#python#owasp#vulnerability assessment
One-click install
npx skills add https://github.com/pellepim/skills --skill py-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: py-security
Source: https://github.com/pellepim/skills/tree/main/py-security
Command: npx skills add https://github.com/pellepim/skills --skill py-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pip-audit, ruff, semgrep, gitleaks, pylint, bandit, pycodestyle, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of conducting security reviews on Python projects, helping identify OWASP Top 10 vulnerabilities and other security issues.

Core Features & Use Cases

  • Automated Vulnerability Assessment: Identifies OWASP Top 10 vulnerabilities and other security issues in Python web applications.
  • Static Analysis: Performs static analysis on code to detect potential vulnerabilities.
  • Manual Review: Provides guidelines for manual review to catch issues that tools cannot detect.
  • Use Case: Use this Skill to automatically scan a Python project for vulnerabilities and then review the findings to ensure they are accurate.

Quick Start

Use the py-security skill to scan the 'my-project' directory for security vulnerabilities.

Frequently Asked Questions about py-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security reviews for a Python project to identify OWASP Top 10 vulnerabilities?▼

To automate security reviews for a Python project, you can use this Skill to scan your codebase for OWASP Top 10 vulnerabilities. It performs static analysis using multiple libraries and requires user interaction to review the final findings.

Can I use pip-audit and semgrep together for vulnerability assessment in Python web applications?▼

Yes, you can use pip-audit and semgrep together for vulnerability assessment. This Skill integrates these dependencies alongside gitleaks and bandit to perform comprehensive static analysis on Python web applications.

What is the best way to scan a Python project for security issues and vulnerabilities?▼

The best way to scan a Python project for security issues is to automate the process using this Skill. It identifies OWASP Top 10 vulnerabilities through static analysis and provides manual review guidelines to ensure accurate findings.

Do I need to manually review the security findings after running an automated Python vulnerability assessment?▼

Yes, you need to manually review the security findings after running an automated Python vulnerability assessment. This Skill provides guidelines for manual review to catch issues that static analysis tools cannot detect.

Does automated static analysis catch all OWASP Top 10 vulnerabilities in Python code?▼

Automated static analysis does not catch all OWASP Top 10 vulnerabilities in Python code. This Skill provides manual review guidelines to supplement automated scans and identify security issues that tools might miss.

Related Skills

Explore More Software Engineering Skills→
prince3626ezechiel-langprince3626ezechiel-lang

clawsec-scanner

Automate vulnerability detection in dependencies and OpenClaw hook handlers.

Community
Advanced
bostonaholicbostonaholic
8

reviewing-security

Audit code changes for OWASP Top 10 vulnerabilities and severity.

Community
Intermediate
flybirdxxflybirdxx

lint-and-validate

Run linters, type checkers, and security scanners on Node.js, Python, and TypeScript codebases.

Community
Advanced
Adam-GuerinAdam-Guerin
1

web-security-testing

Automate web application security testing against OWASP Top 10 vulnerabilities.

Community
Advanced