skills.rest
jorgealves
jorgealvesCOMMUNITY
Explore all skills by this author →
Website𝕏@JorgeAndreAlvesGitHub

python-security-scanner

Detect SQL injections, unsafe deserialization, and hardcoded secrets in Python codebases.

2|1|Updated Jan 25, 2026
Search Tags:#security#python#static-analysis#ci-cd#code-review#vulnerability-detection
One-click install
npx skills add https://github.com/jorgealves/agent_skills --skill python-security-scanner
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: python-security-scanner
Source: https://github.com/jorgealves/agent_skills/tree/main/python-security-scanner
Command: npx skills add https://github.com/jorgealves/agent_skills --skill python-security-scanner

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill detects common Python vulnerabilities such as SQL injection, unsafe deserialization, and hardcoded secrets, helping teams secure Python projects within a secure SDLC.

Core Features & Use Cases

  • Local analysis: Analyzes Python source files and dependencies on the developer's machine.
  • Vulnerability detection: Identifies SQL injections, unsafe deserialization, and hardcoded secrets.
  • Delivery in CI/CD: Integrates into build pipelines to fail builds on high-severity findings.
  • Use Case: Use during project setup, continuous integration, and legacy refactoring to uncover security issues early.

Quick Start

Run the scanner against your Python project directory to generate a vulnerability report.

Frequently Asked Questions about python-security-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect SQL injection vulnerabilities in Python code?▼

Python security scanning identifies SQL injection vulnerabilities by performing local static analysis on your source files and dependencies, generating a detailed report of insecure code patterns.

Can I integrate static analysis into a Python CI pipeline to fail builds on vulnerabilities?▼

Yes, you can integrate static analysis into a Python CI pipeline to automatically fail builds when high-severity security findings like hardcoded secrets or unsafe deserialization are detected.

What's the best way to find hardcoded secrets in legacy Python projects?▼

Running a static security scanner against your legacy Python project directory is the best way to find hardcoded secrets, analyzing source files locally to produce a detailed vulnerability report.

Does Python vulnerability detection work with configurable rules for code reviews?▼

Python vulnerability detection supports configurable rules during code reviews, allowing you to customize static analysis to identify issues like unsafe deserialization across new and legacy projects.

What common Python vulnerabilities can a static code analyzer identify?▼

A Python static code analyzer identifies common vulnerabilities including SQL injections, hardcoded secrets, and unsafe deserialization by scanning source files and project dependencies locally.

Do I need external dependencies to scan Python sources for security issues?▼

No external dependencies are required to scan Python sources for security issues, as the static analysis runs locally on the developer's machine to detect vulnerabilities and generate a security report.

Related Skills

Explore More Software Engineering Skills→
brenordvbrenordv

security

Audit software systems for security vulnerabilities and regulatory compliance.

Community
Advanced
FrekiManagarmFrekiManagarm

Verification & Quality Assurance

Compute truth scores and run correctness, security, performance, and documentation checks with JSON reports and Git rollback.

Community
Advanced
BagelHoleBagelHole
46

sast-scanning

Performs static security testing on source code using Semgrep, CodeQL, and SonarQube.

Community
Intermediate
dy9759dy9759
1

security-audit-expert

Identify and remediate security vulnerabilities across IT infrastructure and applications.

Community
Advanced