# Security Linting

> Automated security scanning for Python code using Bandit.

- Skill: `xspoonai/security-linting` (Agent Skill, multi-file: 3 files)
- Install (CLI): `npx skillmds@latest add xspoonai/security-linting`
- Raw SKILL.md: https://api.skillmd.com/api/skills/xspoonai/security-linting/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: XSpoonAi (https://skillmd.com/u/xspoonai)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/xspoonai/security-linting

---


# Security Linting

Automated security scanning for Python code to detect common vulnerabilities like hardcoded secrets, injection flaws, and unsafe function usage.

## Quick Start

```python
# Run security scan on current directory
scan_result = await agent.run_tool("security_scan", path=".")
print(scan_result)
```

## Scripts

| Script | Purpose |
|--------|---------|
| [security_scan.py](scripts/security_scan.py) | Scans Python files/directories for security issues |

## Environment Variables

None required. Uses local `bandit` installation (will be installed if missing).

## Best Practices

1. Run scans before committing code.
2. Review high-severity issues immediately.
3. Use `# nosec` to suppress false positives (use sparingly).