Python Pre-commit Security Tool

A Pre-commit Security Vulnerability Detection Tool for Python.

Features

• Deep Python security scanning
• Semgrep integration
• Bandit integration
• CVE detection
• Dynamic sandbox analysis
• AST taint analysis
• Security diagnostics
• HTML & SARIF reports
• AI-generated remediation prompts
• Real-time execution timer
• Scan cancellation support

How to Run a Scan

Method 1 — Command Palette

1. Open a Python file
2. Press:

Ctrl + Shift + P

3. Run:

Python Security Scanner: Scan

Method 2 — Status Bar

Click:

Scan

in the VS Code bottom status bar.

Method 3 — Auto Scan on Save

Enable:

"pythonSecurityScanner.autoScanOnSave": true

inside VS Code settings.

The extension automatically scans Python files on save.

Reports

Generated reports:

• HTML Security Report
• SARIF Report

AI Recommended Fix Prompts

If critical vulnerabilities are detected, the extension can generate AI-ready remediation prompts automatically.