python-bandit

Scan Python code with Bandit to detect security vulnerabilities.

11|2|Updated Feb 18, 2026

Search Tags:#static analysis #linting #security #python #vulnerabilities #code-review #bandit

Ready to run

npx skills add https://github.com/the-perfect-developer/the-perfect-opencode --skill python-bandit

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: python-bandit
Source: https://github.com/the-perfect-developer/the-perfect-opencode/tree/main/.opencode/skills/python-bandit
Command: npx skills add https://github.com/the-perfect-developer/the-perfect-opencode --skill python-bandit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Bandit helps developers find security issues in Python code by performing static analysis, building an AST, and applying security-focused plugins to detect common vulnerabilities.

Core Features & Use Cases

Static analysis of Python projects to identify security flaws.
Categorization of findings by severity (LOW, MEDIUM, HIGH) and confidence (LOW, MEDIUM, HIGH) to prioritize remediation.
Quick setup and flexible configuration (CLI usage, pyproject.toml, bandit.yaml, or .bandit baselines) for CI workflows and code reviews.

Quick Start

Run Bandit on your Python project to scan for security issues.

Frequently Asked Questions about python-bandit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I find security vulnerabilities in Python code?▼

Static analysis identifies security vulnerabilities in Python code by building an AST and applying security plugins. It scans full projects to detect common flaws, producing categorized findings by severity and confidence levels for prioritized remediation.

How do I configure Python static analysis for a CI workflow?▼

You can configure Python static analysis for CI workflows using pyproject.toml, bandit.yaml, or a .bandit file. These config methods support baseline workflows to enforce ongoing security and adjust output formats as needed for automated environments.

How does AST static analysis detect Python security issues?▼

AST static analysis detects Python security issues by parsing code into an Abstract Syntax Tree and evaluating it with security-focused plugins. This process identifies common vulnerabilities within the code structure without executing the application.

Can I adjust severity and confidence levels for Python code reviews?▼

Yes, you can adjust severity and confidence levels for Python code reviews. The scanner categorizes findings into LOW, MEDIUM, and HIGH tiers for both metrics, enabling teams to prioritize vulnerability remediation effectively.

What is the best way to maintain a security baseline for Python projects?▼

The best way to maintain a security baseline for Python projects is to use baseline workflows with configuration files like .bandit or bandit.yaml. This approach enforces ongoing security by tracking new vulnerabilities across full project scans over time.