jorgealves/agent_skills

python-security-scanner

Detect common Python vulnerabilities such as SQL injection, unsafe deserialization, and hardcoded secrets. Use as part of a secure SDLC for Python projects.

First seen Jan 30, 2026

Installation

$ npx skills add jorgealves/agent_skills --skill python-security-scanner

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

Also in this package

Other skills from jorgealves/agent_skills · top by installs.

npx skills add jorgealves/agent_skills

Browse all from jorgealves/agent_skills

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 2
License license-compliance-auditor
Default branch main
Open issues 1
Status Active

Package contents

Files included with this skill beyond the listing page.

  • skill md SKILL.md 1,115 B
  • docs SUMMARY.md 1,090 B

History

  1. First seen on skills.sh
  2. First recorded snapshot · 309 installs

SKILL.md

Python Security Scanner

Purpose and Intent

Detect common Python vulnerabilities such as SQL injection, unsafe deserialization, and hardcoded secrets. Use as part of a secure SDLC for Python projects.

When to Use

  • Project Setup: When initializing a new Python project.
  • Continuous Integration: As part of automated build and test pipelines.
  • Legacy Refactoring: When updating older Python codebases to modern standards.

When NOT to Use

  • Non-Python Projects: This tool is specialized for the Python ecosystem.

Error Conditions and Edge Cases

  • Missing Requirements: If the project lacks a requirements.txt or pyproject.toml.
  • Incompatible Versions: If the project uses a Python version not supported by the tools.

Security and Data-Handling Considerations

  • All analysis is performed locally.
  • No source code or credentials are ever transmitted externally.