Bandit SAST

This skill performs static application security testing (SAST) for Python projects using Bandit, identifying common security anti-patterns such as use of dangerous functions, hardcoded credentials, insecure cryptography, and injection risks, then mapping findings to CWE and OWASP Top 10:2021 standards.

When to Use

• When the user asks to "scan Python code for security issues" or "run Bandit"
• When the user mentions "Python SAST" or "security scan Python"
• When reviewing Python code for vulnerabilities before deployment
• When a pull request contains changes to .py files and a security check is requested
• When the user asks to find insecure patterns like eval, exec, pickle, or hardcoded passwords in Python

When NOT to Use