python-sast

Name: python-sast
Availability: InStock
Author: vladkesler

Run Bandit on Python repositories and parse JSON security findings.

39|6|Updated Feb 9, 2026

Search Tags:#security #vulnerability #python #code-quality #static-analysis #bandit

Ready to run

npx skills add https://github.com/vladkesler/initrunner --skill python-sast

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: python-sast
Source: https://github.com/vladkesler/initrunner/tree/main/examples/roles/security-scanner/skills/python-sast
Command: npx skills add https://github.com/vladkesler/initrunner --skill python-sast

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Python static analysis using Bandit identifies common security issues in Python code, including injection, deserialization, unsafe exec/eval, weak crypto, and hardcoded credentials.

Core Features & Use Cases

Bandit-based static analysis for Python projects.
Detects common vulnerability classes such as injection, deserialization, unsafe exec/eval, weak crypto, and hardcoded credentials.
Produces structured JSON output via bandit -f json for automated parsing.
Applies to Python repositories containing pyproject.toml, setup.py, requirements.txt, or .py files.

Quick Start

Run Bandit recursively on your Python project to generate a JSON report.

Frequently Asked Questions about python-sast

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I find security vulnerabilities in my Python code?▼

To find Python security vulnerabilities, this Skill runs Bandit recursively on your project to detect injection, deserialization, unsafe exec/eval, weak crypto, and hardcoded credentials. It generates structured JSON output for automated parsing and analysis across diverse codebases and CI environments.

What types of security issues does Bandit static analysis detect in Python projects?▼

Bandit static analysis detects common Python security issues including injection, deserialization, unsafe exec/eval, weak crypto, and hardcoded credentials. It scans your repository and produces JSON-formatted findings that identify these vulnerability classes automatically.

Can I run Bandit static analysis on a Python project without pyproject.toml?▼

Yes, Bandit static analysis applies to Python repositories containing pyproject.toml, setup.py, requirements.txt, or any .py files. It scans your codebase regardless of which specific project configuration file is present.

Do I need Bandit installed to run Python static analysis on my repository?▼

Yes, you need Bandit installed to perform Python static analysis on your repository. This Skill requires Bandit to run recursively on your project and parse its JSON output for vulnerability detection across your codebase.

How do I parse Bandit JSON output for automated vulnerability analysis?▼

To parse Bandit JSON output for automated vulnerability analysis, this Skill runs bandit -f json on your Python project and collects the structured findings. The JSON format enables automated parsing of detected security issues across CI environments.

What is the best way to integrate Python security scanning into CI environments?▼

The best way to integrate Python security scanning into CI environments is using Bandit to generate structured JSON reports. This Skill runs Bandit recursively on your project, producing automated JSON output for parsing security findings across diverse codebases and CI workflows.