create-comprehensive-security

Run bandit against your source directory to detect common vulnerabilities, review key files like authentication and API modules, then document findings in a markdown report. This Skill automates that sequence and commits the resulting security-audit-report.md to git.

Execute python -m bandit -r src/ to recursively scan the src directory for security issues. Bandit flags common problems such as hardcoded passwords, unsafe function calls, and injection risks.

No, the static analysis step relies on bandit, which only scans Python source files. Projects in other languages would need a different analyzer such as Semgrep or a language-specific linter.

Avoid it for destructive operations, tasks requiring modification of authority files without approval, or subjective unverifiable goals. It is also unnecessary for simple one-shot questions that a direct response can answer.

The audit uses file read and write access, shell execution for bandit and git commands, and web search for current security best practices. All four capabilities must be available for the full workflow to complete.