python-security-scanner

Identifies SQL injection, unsafe deserialization, and hardcoded secrets in Python source files locally.

4|Updated Nov 18, 2025
One-click install
npx skills add https://github.com/informatico-madrid/ha-ev-trip-planner --skill python-security-scanner-informatico-madrid
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: python-security-scanner
Source: https://github.com/informatico-madrid/ha-ev-trip-planner/tree/main/.agents/skills/python-security-scanner
Command: npx skills add https://github.com/informatico-madrid/ha-ev-trip-planner --skill python-security-scanner-informatico-madrid

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Detect Python vulnerabilities such as SQL injection, unsafe deserialization, and hardcoded secrets to help ensure secure software delivery.

Core Features & Use Cases

  • Detect common Python vulnerabilities such as SQL injection, unsafe deserialization, and hardcoded secrets.
  • Integrate with CI/CD pipelines or during project setup to enforce a secure SDLC.
  • Operate locally; analysis never transmits project code externally.

Quick Start

Run the Python Security Scanner on your project directory to generate a vulnerability report.

Frequently Asked Questions about python-security-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect hardcoded secrets and SQL injection in my Python project?

To detect Python vulnerabilities like hardcoded secrets and SQL injection, run a local security scanner on your project directory. It inspects source files and generates a vulnerability report without transmitting data externally.

Can I scan for unsafe deserialization locally without sending my code to a remote server?

Yes, you can scan for unsafe deserialization locally. The analysis operates entirely on your machine and never transmits your project code or data externally during the inspection process.

Does the vulnerability scanner work with continuous integration pipelines?

Yes, the vulnerability scanner works with continuous integration pipelines. It integrates into CI/CD workflows or project setup to inspect code and enforce a secure software delivery lifecycle.

Do I need a specific Python environment to check my project for vulnerabilities?

Yes, you need a valid Python environment to check your project for vulnerabilities. The scanner analyzes local source files, including requirements.txt or pyproject.toml, to identify security issues.

What is the best way to find Python vulnerabilities during legacy refactoring?

The best way to find Python vulnerabilities during legacy refactoring is to run a local scanner. It identifies SQL injection, unsafe deserialization, and hardcoded secrets directly within your local source files.

What types of Python vulnerabilities can a local source code scanner identify?

A local source code scanner can identify common Python vulnerabilities such as SQL injection, unsafe deserialization, and hardcoded secrets to help ensure secure software delivery.