python

Preventing command injection in Python subprocesses requires avoiding shell=True and passing arguments as sequences. This Skill enforces safe subprocess execution patterns by blocking shell-based execution and ensuring parameterized process invocation to mitigate injection risks.

Validating inputs in async Python services is safest using Pydantic-based validation. This Skill enforces Pydantic data validation to ensure typed, validated flows, blocking risky untyped inputs and preventing unsafe data handling in your backend modules.

Securing Python file operations against path traversal involves enforcing path containment checks before reading or writing. This Skill provides guardrails for safe file handling and archive extraction, explicitly checking paths to prevent directory traversal vulnerabilities.

This Python secure coding guidance explicitly excludes FastAPI and Django implementations. It targets async services, CLI tooling, packaging, and general Python modules, focusing on core secure coding tasks rather than specific web framework implementations.

Avoiding pickle for serialization in Python backends is critical because deserializing untrusted pickle data leads to remote code execution. This Skill prevents unsafe deserialization by blocking pickle and enforcing safe serialization patterns to protect your application.

Writing a secrets-free Python CLI tool that calls external APIs requires using httpx for safe HTTP calls and validating all inputs. This Skill enforces secrets-free code generation, ensuring outputs are safely encoded and external interactions are secured.