Python Security Scan

The Python Security Scan skill provides a robust, project-level security auditing suite specifically tailored for Python-based web applications. It serves as an enhanced alternative to standard security reviews for projects utilizing Flask, Django, or FastAPI frameworks. By integrating both static analysis and dependency auditing, this skill assists developers and security engineers in proactively identifying vulnerabilities before deployment. It covers the full spectrum of the OWASP Top 10:2025 guidelines and implements framework-specific logic to detect configuration errors, insecure authentication, injection flaws, and cryptographic failures that automated generic scanners might overlook.

• Performs comprehensive vulnerability scans covering SQL/NoSQL/Command/LDAP injection, insecure deserialization, and authentication/authorization flaws.

• Features framework-specific security analysis for Flask (template injection, session security), Django (ORM injection, CSRF), and FastAPI (Pydantic validation, dependency injection).

• Automates dependency auditing using industry-standard tools like pip-audit and safety to identify CVEs in project requirements.

• Scans codebase for hardcoded secrets, API keys, and insecure credential management while intelligently handling sensitive environment files.

• Generates structured, actionable security reports with severity classification ranging from CRITICAL to INFO.

• Ideal for use during code reviews, pre-deployment CI/CD checks, and routine security health assessments.

• Requires local access to the source code repository; ensures .env files are handled securely by skipping sensitive files by default unless explicitly requested.

• Can be invoked in Quick, Full, or Targeted scan modes, allowing users to focus on specific vulnerability categories like deserialization, crypto, or framework-specific configs.

• Supports integration with project-specific documentation and security references to ensure scan patterns remain up-to-date with evolving security threats.