sast-bandit
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONNO_CODE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the 'bandit' security tool from the official Python Package Index (PyPI) and references several official GitHub repositories for industry-standard linting and security tools such as black, isort, flake8, and detect-secrets within its pre-commit configuration.
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to install and run the Bandit CLI tool via shell commands to analyze Python code for security vulnerabilities (e.g., 'pip install bandit', 'bandit -r .').
- [NO_CODE]: The documentation references an auxiliary script 'scripts/bandit_analyzer.py' for enhanced reporting and ticketing integration, but this file is not included in the provided skill distribution package.
Audit Metadata