The Agent Skills Directory

[SAFE]: The skill serves as an educational and reference resource for the Bandit Python security linter, containing no executable logic that poses a threat to the user or system.\n- [EXTERNAL_DOWNLOADS]: The skill references standard Python packages such as bandit and pre-commit, as well as official GitHub Actions from well-known repositories including PyCQA/bandit-action and actions/checkout. These are reputable sources for developer tooling and are used as intended.\n- [COMMAND_EXECUTION]: The provided shell commands are standard invocations for the Bandit CLI tool to perform static analysis, generate configuration templates, and create security reports. These are safe within the context of the skill's purpose.\n- [DYNAMIC_EXECUTION]: Static analysis hints correctly identified the presence of eval() and exec() in references/plugin-reference.md. However, these are documented as insecure coding patterns that users should avoid and that the Bandit tool is designed to detect. They are presented as non-executable examples within markdown blocks and do not constitute a code injection risk.

python-bandit