bandit-sast
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
banditpackage from the public PyPI registry usingpip install bandit.- [COMMAND_EXECUTION]: Executes shell commands to detect the scanner, install it, and run recursive security scans on the local file system.- [INDIRECT_PROMPT_INJECTION]: The skill analyzes untrusted Python source code, which introduces a surface for indirect prompt injection. - Ingestion points: Reads
*.pyfiles and project metadata files (SKILL.md). - Boundary markers: None provided in the instructions for isolating untrusted file content.
- Capability inventory: Execution of shell commands and installation of packages (SKILL.md).
- Sanitization: No explicit sanitization or escaping of file content is defined before the agent performs a manual security review.
Audit Metadata