sck.python-security-scan

Name: sck.python-security-scan
Author: alxayo

Python-focused security scan using bandit and guarddog

by alxayo(0) 0 installs

Free

Free account. Installing gives you the manifest plus copy-paste snippets.

See reviews

About

Prompt file imported from alxayo/sec-check (.github/prompts/sck.security-scan-python.prompt.md). Copyright stays with the author.

Python Security Scan

Run a Python-focused security scan on this workspace.

Tools to Execute

Execute bandit with full rules: bandit -r . -f json
Check for guarddog Python package issues

Patterns to Detect

eval(), exec(), compile() usage
subprocess with shell=True
pickle deserialization (unsafe loading)
Hardcoded credentials
Unsafe YAML/XML loading (yaml.load() without Loader)
SQL injection vulnerabilities
Path traversal risks

Save results to .github/.audit/scan-results.md

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

# Python Security Scan

Run a Python-focused security scan on this workspace.

## Tools to Execute

1. Execute bandit with full rules: `bandit -r . -f json`
2. Check for guarddog Python package issues

## Patterns to Detect

- `eval()`, `exec()`, `compile()` usage
- `subprocess` with `shell=True`
- `pickle` deserialization (unsafe loading)
- Hardcoded credentials
- Unsafe YAML/XML loading (`yaml.load()` without `Loader`)
- SQL injection vulnerabilities
- Path traversal risks

Save results to `.github/.audit/scan-results.md`

alxayo-sec-check-sck-security-scan-python-prompt.prompt.jsonjson

{
  "prompt": "# Python Security Scan\n\nRun a Python-focused security scan on this workspace.\n\n## Tools to Execute\n\n1. Execute bandit with full rules: `bandit -r . -f json`\n2. Check for guarddog Python package issues\n\n## Patterns to Detect\n\n- `eval()`, `exec()`, `compile()` usage\n- `subprocess` with `shell=True`\n- `pickle` deserialization (unsafe loading)\n- Hardcoded credentials\n- Unsafe YAML/XML loading (`yaml.load()` without `Loader`)\n- SQL injection vulnerabilities\n- Path traversal risks\n\nSave results to `.github/.audit/scan-results.md`",
  "variables": [],
  "notes": "Python-focused security scan using bandit and guarddog",
  "metadata": {
    "source": {
      "provider": "github-prompts",
      "repository": "https://github.com/alxayo/sec-check",
      "path": ".github/prompts/sck.security-scan-python.prompt.md",
      "ref": "da661ac01b84e859eacdc8d420763322a00681eb",
      "url": "https://github.com/alxayo/sec-check/blob/da661ac01b84e859eacdc8d420763322a00681eb/.github/prompts/sck.security-scan-python.prompt.md",
      "key": "alxayo/sec-check/.github/prompts/sck.security-scan-python.prompt.md"
    }
  },
  "model_hints": [
    "Claude Sonnet 4.5"
  ]
}

Fetch it by URL: GET /api/v1/registry/alxayo-sec-check-sck-security-scan-python-prompt/manifest?version=1.0.0

sck.python-security-scan

About

Python Security Scan

Tools to Execute

Patterns to Detect

Use it

Manifest

Reviews