python-security

What problem does it solve?

This Skill consolidates Python security best practices, focusing on avoiding unsafe APIs (eval, exec, pickle), enforcing robust input validation, preventing SQL injection, ensuring cryptographic randomness, and promoting safe subprocess and file handling.

Core Features & Use Cases

• Unsafe API mitigation: Avoid eval/exec/pickle in untrusted code and replace with safe alternatives.
• Input validation & data sanitization: Apply explicit type checks, bounds validation, and safe parsing.
• SQL injection prevention: Use parameterized queries and ORM-safe patterns.
• Crypto-safe operations: Use cryptographically secure randomness and avoid weak RNGs.
• Subprocess & file handling: Use safe subprocess calls and secure file I/O practices.
• Use Case: When auditing a Python service that processes user input and stores data, this Skill guides safe coding patterns and review steps.

Quick Start

Review provided Python code to replace unsafe APIs with safe equivalents and enforce input validation, parameterized queries, and secure subprocess usage.