{"id":"f8cc3f84-2b0b-47bd-ab60-272d000de4ca","shortId":"GvNKwv","kind":"skill","title":"Scan Python code for risky security patterns with Bandit before review or release","tagline":"Catch insecure Python calls, weak crypto usage, shell injection risks, and similar patterns before merge or release.","description":"# Scan Python code for risky security patterns with Bandit before review or release\n\nCatch insecure Python calls, weak crypto usage, shell injection risks, and similar patterns before merge or release.\n\n## Prerequisites\n\nBandit CLI, Python source tree\n\n## Installation\n\nUse the upstream install or setup path that matches your environment:\n- docker pull ghcr.io/pycqa/bandit/bandit\n- docker pull --platform=<architecture> ghcr.io/pycqa/bandit/bandit:latest\n\nRequirements and caveats from upstream:\n- :alt: Python Versions\n- Bandit is a tool designed to find common security issues in Python code. To do\n- Python AST module documentation: https://docs.python.org/3/library/ast.html\n\nBasic usage or getting-started notes:\n- :alt: Bandit Example Screen Shot\n\n- Source: https://github.com/PyCQA/bandit\n- Extracted from upstream docs: https://raw.githubusercontent.com/PyCQA/bandit/HEAD/README.rst\n\n## Documentation\n\n- https://bandit.readthedocs.io/\n\n## Source\n\n- [Agent Skill Exchange](https://agentskillexchange.com/skills/scan-python-code-for-risky-security-patterns-with-bandit-before-review-or-release/)","tags":["scan","python","code","for","risky","security","patterns","with","bandit","before","review","release"],"capabilities":["skill","source-agentskillexchange","skill-scan-python-code-for-risky-security-patterns-with-bandit-before-review-or-release","topic-agent-skills","topic-ai-agents","topic-ai-tools","topic-awesome-list","topic-claude-code","topic-codex","topic-cursor","topic-llm","topic-mcp","topic-npx-skills","topic-openclaw","topic-skills-catalog"],"categories":["skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/agentskillexchange/skills/scan-python-code-for-risky-security-patterns-with-bandit-before-review-or-release","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add agentskillexchange/skills","source_repo":"https://github.com/agentskillexchange/skills","install_from":"skills.sh"}},"qualityScore":"0.454","qualityRationale":"deterministic score 0.45 from registry signals: · indexed on github topic:agent-skills · 8 github stars · SKILL.md body (1,103 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-05-18T19:12:18.622Z","embedding":null,"createdAt":"2026-05-18T13:19:09.461Z","updatedAt":"2026-05-18T19:12:18.622Z","lastSeenAt":"2026-05-18T19:12:18.622Z","tsv":"'/3/library/ast.html':119 '/pycqa/bandit':135 '/pycqa/bandit/bandit':83 '/pycqa/bandit/bandit:latest':89 '/pycqa/bandit/head/readme.rst':142 '/skills/scan-python-code-for-risky-security-patterns-with-bandit-before-review-or-release/)':151 'agent':146 'agentskillexchange.com':150 'agentskillexchange.com/skills/scan-python-code-for-risky-security-patterns-with-bandit-before-review-or-release/)':149 'alt':95,127 'ast':114 'bandit':9,39,62,98,128 'bandit.readthedocs.io':144 'basic':120 'call':17,47 'catch':14,44 'caveat':92 'cli':63 'code':3,33,110 'common':105 'crypto':19,49 'design':102 'doc':139 'docker':79,84 'docs.python.org':118 'docs.python.org/3/library/ast.html':117 'document':116,143 'environ':78 'exampl':129 'exchang':148 'extract':136 'find':104 'get':124 'getting-start':123 'ghcr.io':82,88 'ghcr.io/pycqa/bandit/bandit':81 'ghcr.io/pycqa/bandit/bandit:latest':87 'github.com':134 'github.com/pycqa/bandit':133 'inject':22,52 'insecur':15,45 'instal':67,71 'issu':107 'match':76 'merg':28,58 'modul':115 'note':126 'path':74 'pattern':7,26,37,56 'platform':86 'prerequisit':61 'pull':80,85 'python':2,16,32,46,64,96,109,113 'raw.githubusercontent.com':141 'raw.githubusercontent.com/pycqa/bandit/head/readme.rst':140 'releas':13,30,43,60 'requir':90 'review':11,41 'risk':23,53 'riski':5,35 'scan':1,31 'screen':130 'secur':6,36,106 'setup':73 'shell':21,51 'shot':131 'similar':25,55 'skill':147 'skill-scan-python-code-for-risky-security-patterns-with-bandit-before-review-or-release' 'sourc':65,132,145 'source-agentskillexchange' 'start':125 'tool':101 'topic-agent-skills' 'topic-ai-agents' 'topic-ai-tools' 'topic-awesome-list' 'topic-claude-code' 'topic-codex' 'topic-cursor' 'topic-llm' 'topic-mcp' 'topic-npx-skills' 'topic-openclaw' 'topic-skills-catalog' 'tree':66 'upstream':70,94,138 'usag':20,50,121 'use':68 'version':97 'weak':18,48","prices":[{"id":"cfeaaf21-113c-4f0c-80b6-62070fd3e275","listingId":"f8cc3f84-2b0b-47bd-ab60-272d000de4ca","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"agentskillexchange","category":"skills","install_from":"skills.sh"},"createdAt":"2026-05-18T13:19:09.461Z"}],"sources":[{"listingId":"f8cc3f84-2b0b-47bd-ab60-272d000de4ca","source":"github","sourceId":"agentskillexchange/skills/scan-python-code-for-risky-security-patterns-with-bandit-before-review-or-release","sourceUrl":"https://github.com/agentskillexchange/skills/tree/main/skills/scan-python-code-for-risky-security-patterns-with-bandit-before-review-or-release","isPrimary":false,"firstSeenAt":"2026-05-18T13:19:09.461Z","lastSeenAt":"2026-05-18T19:12:18.622Z"}],"details":{"listingId":"f8cc3f84-2b0b-47bd-ab60-272d000de4ca","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"agentskillexchange","slug":"scan-python-code-for-risky-security-patterns-with-bandit-before-review-or-release","github":{"repo":"agentskillexchange/skills","stars":8,"topics":["agent-skills","ai-agents","ai-tools","awesome-list","claude-code","codex","cursor","llm","mcp","npx-skills","openclaw","skills-catalog"],"license":"mit","html_url":"https://github.com/agentskillexchange/skills","pushed_at":"2026-05-18T19:02:17Z","description":"The open catalog of AI agent skills — 2,000+ security-scanned skills for Claude Code, Cursor, Codex, and more.","skill_md_sha":"8acbfe62d43a5004a5c36ae6411e381b3a40d746","skill_md_path":"skills/scan-python-code-for-risky-security-patterns-with-bandit-before-review-or-release/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/agentskillexchange/skills/tree/main/skills/scan-python-code-for-risky-security-patterns-with-bandit-before-review-or-release"},"layout":"multi","source":"github","category":"skills","frontmatter":{"name":"Scan Python code for risky security patterns with Bandit before review or release","description":"Catch insecure Python calls, weak crypto usage, shell injection risks, and similar patterns before merge or release."},"skills_sh_url":"https://skills.sh/agentskillexchange/skills/scan-python-code-for-risky-security-patterns-with-bandit-before-review-or-release"},"updatedAt":"2026-05-18T19:12:18.622Z"}}