security-audit¶

Run a security audit on a Python package with risk rating and structured verdict

Plugin: python-package-skills | Internal

Contract¶

Audit a Python package for security risks including vulnerabilities, license concerns, dependency risks, and code quality signals. Produce a detailed report and machine-readable verdict with risk rating.

Identity

Functions

analyze

Success

Produces .security-audit-output.md with findings grouped by category and risk rating.
Produces .security-verdict.json with valid verdict, risk_rating, summary, and findings.

Optimization Targets

task_success deterministic

Invariants

Must Preserve

Only accept HTTPS URLs pointing to github.com or gitlab.com.
Do not execute untrusted package code.

Fixed Context

toolsRead, Write, Grep, Glob

knowledgetask_inputtask_private

Traceability

Skill

skills/security-audit/SKILL.md

Usage¶

/security-audit