A Pre-commit Security Vulnerability Detection Tool for Python.
Features
- Deep Python security scanning
- Semgrep integration
- Bandit integration
- CVE detection
- Dynamic sandbox analysis
- AST taint analysis
- Security diagnostics
- HTML & SARIF reports
- AI-generated remediation prompts
- Real-time execution timer
- Scan cancellation support
How to Run a Scan
Method 1 — Command Palette
- Open a Python file
- Press:
Ctrl + Shift + P
- Run:
Python Security Scanner: Scan
Method 2 — Status Bar
Click:
Scan
in the VS Code bottom status bar.
Method 3 — Auto Scan on Save
Enable:
"pythonSecurityScanner.autoScanOnSave": true
inside VS Code settings.
The extension automatically scans Python files on save.
Reports
Generated reports:
- HTML Security Report
- SARIF Report
AI Recommended Fix Prompts
If critical vulnerabilities are detected, the extension can generate AI-ready remediation prompts automatically.