Python Security Scan
This is a Python security scanner built around OWASP guidelines and framework-specific vulnerability checks. It covers the basics you'd want before deployment: dependency vulnerabilities, hardcoded secrets, and security issues specific to Flask, Django, and FastAPI. The skill failed Gen Agent Trust Hub and Snyk audits but passed Socket, which is worth noting if you're running this in production environments. Best suited for code reviews and pre-deployment checks when you need a broad sweep rather than deep specialized analysis. It's from sugarforever's 01coder-agent-skills repo, which has a decent following at 105 stars.
- GitHub stars
- 130
- last updated
- Aug 21, 2026
Install
$ npx -y skills add sugarforever/01coder-agent-skills --skill 'Python Security Scan' --agent claude-codeInstalls into .claude/skills of the current project.
Files
Python Security Scan Skill
This skill enables comprehensive security scanning of Python projects based on OWASP guidelines, Python security best practices, and framework-specific vulnerabilities.
When to Use This Skill
- Security audits of Python applications
- Code review for security vulnerabilities
- Pre-deployment security checks
- Dependency vulnerability assessment
- Detecting hardcoded secrets and credentials
- Framework-specific security reviews (Flask, Django, FastAPI)
Supported Frameworks
This skill automatically detects and applies framework-specific checks for:
- Flask - Template injection, session security, CORS, extensions
- Django - ORM injection, CSRF, template security, settings
- FastAPI - Dependency injection, Pydantic validation, OAuth2
- General Python - Core language vulnerabilities applicable to all projects
Scan Types
1. Quick Scan
Fast scan focusing on critical vulnerabilities:
- Hardcoded secrets, API keys, and credentials
- Dangerous function usage (
eval,exec,pickle.loads) - Command injection via
subprocess,os.system - SQL injection patterns
- Known vulnerable dependencies
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/sugarforever/01coder-agent-skills
- Categories
- Backend & APIs, Security, AI & Agent Building, Python
- First seen
- Jun 3, 2026
More from sugarforever/01coder-agent-skills
All 13Recommended
More Backend & APIs
Superior Tradesuperior-trade/superior-skillsSuperior Trade API key (x-api-key header). Obtained at https://account.superior.trade. Can create/manage backtests and deployments including live trading, and c0skills.sh installs
free-willsyahiidkamil/software-engineer-ai-agent-atlasDeliberate-choice procedure for a medium-to-high-stakes engineering fork — when the first plausible solution (the instinct, the default next-token pull) would b0skills.sh installs
analyzing-spreadsheetstelagod/code-abyssProcesses Excel spreadsheet files (.xlsx, .xlsm, .csv). Creates workbooks, builds formulas, preserves formatting, analyzes tabular data, and validates financial0skills.sh installsautomating-devopstelagod/code-abyssDevOps knowledge reference covering Git workflows, testing strategies, DevSecOps, release pipeline orchestration (release.yml, multi-arch images, cosign integra0skills.sh installsoperating-kicad-edatelagod/code-abyssKiCad EDA orchestration via kicad-mcp MCP server. Routes 17 tools for schematic creation, PCB layout, autorouting, DRC, and Gerber export. Enforces serialized P0skills.sh installs
mcp-attribution-worktreeTencentCloudBase/CloudBase-AI-ToolkitTriage, repair, and close MCP attribution issues from the local report API with evidence-driven decisions and isolated Worktrunk worktrees. Use this skill when 0skills.sh installs