Agent skill · security · aiskillstore
sast-bandit
Python security vulnerability detection using Bandit SAST with CWE and OWASP mapping. Use when: (1) Scanning Python code for security vulnerabilities and anti-patterns, (2) Identifying hardcoded secrets, SQL injection, command injection, and insecure APIs, (3) Generating security reports with severity classifications for CI/CD pipelines, (4) Providing remediation guidance with security framework references, (5) Enforcing Python security best practices in development workflows.
Why this skill is useful
Provides domain-specific knowledge for Python security vulnerabilities and actionable remediation strategies that the AI wouldn't reliably generate on its own.
What it needs
Requires bandit installed locally. About 5k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Bandit Python SAST Overview Bandit is a security-focused static analysis tool for Python that identifies common security vulnerabilities and coding anti-patterns. It parses Python code into Abstract Syntax Trees (AST) and executes security plugins to detect issues like hardcoded credentials, SQL injection, command injection, weak cryptography, and insecure API usage. Bandit provides actionable reports with severity classifications aligned to industry security standards. Quick Start Scan a Python file or directory for security vulnerabilities: Core Workflow Step 1: Install and Configure Bandit Install Bandit via pip: Create a configuration file .bandit or .bandit.yaml to customize scans: Step 2: Execute Security Scan Run Bandit against Python codebase: Step 3: Analyze Results Bandit reports findings with: Issue Type: Vulnerability category (e.g., hardcodedpassword, sqlinjection) Severity: LOW, MEDIUM, HIGH Confidence: LOW, MEDIUM, HIGH CWE: Common Weakness Enumeration reference Location: File path and line number Example output: Step 4: Prioritize Findings Focus remediation efforts using this priority matrix: 1. Critical: HIGH severity + HIGH confidence 2. High: HIGH severity OR MEDIUM severity + HIGH confidence 3. Medium: MEDIUM severity + MEDIUM confidence 4. Low: LOW severity OR LOW confidence Step 5: Remediate Vulnerabilities For each finding, consult the bundled references/remediationguide.md for secure coding patterns. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/sast-bandit