python-security-review
Reviews Python services and automation for secure coding risks when a Python security audit is requested.
Source facts
- Repository
- Lucatronlk/justsec-agent-kit
- Last source activity
- November 5, 2026 at 11:03
- Detected SKILL.md language
- English
- Stars
- 0
- Forks
- 0
Install options
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Review the source files
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
Showing SKILL.md
SKILL.md
Source instructions · Read-only preview- name
- python-security-review
- description
- Reviews Python services and automation for secure coding risks when a Python security audit is requested.
# python-security-review
## When To Use
Use for Python services, scripts, Lambdas, automation, and dependency reviews.
## Workflow
1. Identify entry points, inputs, outputs, and network calls.
2. Review secrets handling, subprocess use, deserialization, filesystem access, and auth logic.
3. Check dependency pinning and known-vulnerability tooling.
4. Verify timeouts, retries, error handling, and logging hygiene.
5. Draft minimal safe fixes.
## Validation Commands
- `ruff check .`
- `bandit -r .`
- `pytest -q`
- `pip-audit` if available
## Output Format
- Summary
- Findings by severity
- Evidence
- Patch
- Validation
- Rollback
- Residual risk
## Related Skills
- [python-untrusted-input](../python/python-untrusted-input/) — loaders, HTTP/GraphQL clients and paths that handle bytes you did not write; run a hostile input, not just a code read.
View on GitHub