Python Security Scanner
- 293 installs
- 2 repo stars
- Updated January 25, 2026
- jorgealves/agent_skills
python-security-scanner is a Claude Code agent skill that runs static and dependency security scans on Python codebases to catch injection risks, unsafe deserialization, hardcoded secrets, and vulnerable packages before
About
python-security-scanner is an agent skill for Python teams who need automated security review before merge or deploy. The skill guides static analysis across application code to surface injection flaws, unsafe deserialization patterns, and hardcoded secrets, then checks dependency manifests for known vulnerable packages. Developers reach for python-security-scanner when shipping Python APIs, CLIs, or services and want a structured pre-release pass without manually chaining Bandit, pip-audit, and secret scanners. It fits CI pre-merge gates and local agent-assisted audits on Flask, Django, FastAPI, and library repos where Python security hygiene must be verified consistently.
- Dependency CVE scanning
- SAST for Python patterns
- Secret and credential detection
- Injection risk review
- Pre-release hardening checklist
Python Security Scanner by the numbers
- 293 all-time installs (skills.sh)
- +9 installs in the week ending Aug 2, 2026 (Skillselion tracking)
- Ranked #641 of 2,203 Security skills by installs in the Skillselion catalog
- Data as of Aug 2, 2026 (Skillselion catalog sync)
npx skills add https://github.com/jorgealves/agent_skills --skill python-security-scannerAdd your badge
Show developers this skill is listed on Skillselion. Paste this into your README.
| Installs | 293 |
|---|---|
| repo stars | ★ 2 |
| Last updated | January 25, 2026 |
| Repository | jorgealves/agent_skills ↗ |
How do you scan Python code for security issues pre-release?
Run static and dependency security scans on Python codebases to catch injection risks, unsafe deserialization, hardcoded secrets, and vulnerable packages pre-release.
Who is it for?
Python backend developers shipping APIs or services who need agent-guided static and dependency security review before production.
Skip if: Teams needing runtime penetration testing, infrastructure hardening, or non-Python language security audits.
When should I use this skill?
User asks to security-scan a Python codebase, audit dependencies, or check for secrets and injection risks before release.
What you get
Security finding report covering injection risks, deserialization issues, exposed secrets, and vulnerable dependency packages.
- security findings report
- vulnerable dependency list
- hardcoded secret locations
Files
Python Security Scanner
Purpose and Intent
Detect common Python vulnerabilities such as SQL injection, unsafe deserialization, and hardcoded secrets. Use as part of a secure SDLC for Python projects.
When to Use
- Project Setup: When initializing a new Python project.
- Continuous Integration: As part of automated build and test pipelines.
- Legacy Refactoring: When updating older Python codebases to modern standards.
When NOT to Use
- Non-Python Projects: This tool is specialized for the Python ecosystem.
Error Conditions and Edge Cases
- Missing Requirements: If the project lacks a requirements.txt or pyproject.toml.
- Incompatible Versions: If the project uses a Python version not supported by the tools.
Security and Data-Handling Considerations
- All analysis is performed locally.
- No source code or credentials are ever transmitted externally.
name: python-security-scanner
version: 1.0.0
description: Detect common Python vulnerabilities such as SQL injection, unsafe deserialization, and hardcoded secrets. Use as part of a secure SDLC for Python projects.
inputs:
project_path:
type: string
description: Path to the Python project directory.
required: true
outputs:
report:
type: string
description: A detailed report of the analysis or actions performed.
capabilities:
- Automated analysis of Python project structure.
- Integration with standard Python tooling.
constraints:
- Requires a valid Python environment.
security:
- Operates locally on source files.
examples:
- input:
project_path: "."
output:
report: "Analysis complete. No issues found."
Related skills
Entra App RegistrationCorrectly register an application in Microsoft Entra ID, configure OAuth 2.0 flows, request the right API permissions, and generate working MSAL authentication snippets484k1.3kAzure ComplianceRun automated Azure compliance scans, security posture checks, and Key Vault expiration audits before deploying.484k1.3k
Openclaw Secure Linux CloudDeploy and harden an OpenClaw agent instance on a Linux cloud server following battle-tested security defaults.270k72
Better Auth Best PracticesCorrectly configure Better Auth for secure authentication with database adapters, sessions, OAuth, email/password, and plugins in TypeScript projects.80.9k206
Firebase Security Rules AuditorAutomatically audit Firebase Firestore security rules for bypass vulnerabilities and logic gaps before deploying.80.4k397
Audit WebsiteRun comprehensive audits that surface SEO, performance, security, technical, and content issues with LLM-optimized reports and health scores.65.6k85How it compares
Pick python-security-scanner for Python-specific pre-release SAST and dependency audits; use general pentest skills for runtime exploitation testing.
FAQ
What does python-security-scanner check in a Python repo?
python-security-scanner runs static analysis for injection and unsafe deserialization, scans for hardcoded secrets, and reviews dependency manifests for known vulnerable packages before release.
When should developers use python-security-scanner?
python-security-scanner fits pre-merge or pre-deploy gates on Python APIs, CLIs, and services when teams need structured SAST plus dependency CVE review without manually chaining multiple tools.