Security

Python security best practices, OWASP, and vulnerability prevention

pluginagentmarketplace 4eb2ea0 6 files · 9.9 KB Updated

File contents

Python Security Skill

Overview

Implement secure Python code practices and protect applications from common vulnerabilities.

Topics Covered

Common Vulnerabilities

  • SQL injection prevention
  • Command injection
  • Path traversal
  • Deserialization attacks
  • SSRF vulnerabilities

Secure Coding

  • Input validation
  • Output encoding
  • Secure file handling
  • Secrets management
  • Environment variables

Authentication

  • Password hashing (bcrypt, argon2)
  • JWT implementation
  • Session security
  • OAuth integration
  • API key management

Dependency Security

  • pip audit usage
  • Safety scanner
  • Snyk for Python
  • Dependabot setup
  • Vulnerability databases

Security Testing

  • Bandit static analysis
  • Security unit tests
  • Penetration testing basics
  • SAST/DAST tools
  • Code review checklist

Prerequisites

  • Python fundamentals
  • Web development basics

Learning Outcomes

  • Write secure Python code
  • Prevent common attacks
  • Audit dependencies
  • Implement authentication securely

pluginagentmarketplace/custom-plugin-python/tree/main/skills/security commit 4eb2ea0541

Frequently asked questions

npx skillmds add pluginagentmarketplace-custom-plugin-python/security