Audit Python Web Apps Before Release
Python teams need repeatable checks for common application security controls. This skill provides configurable pytest coverage with clear evidence, boundaries, and release decisions.
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "python-web-app-security-audit" from https://skillstore.io/skills/glenskii-python-web-app-security-audit.md and its manifest at https://skillstore.io/api/skills/glenskii-python-web-app-security-audit/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Using "python-web-app-security-audit". Assess authentication controls for the configured protected and admin routes.
Expected outcome:
Using "python-web-app-security-audit". Summarize a failed CORS and cookie audit.
Expected outcome:
BLOCKED: The protected route accepts the hostile origin, and the session cookie lacks Secure. Restrict allowed origins, enable Secure, and rerun both checks.
Using "python-web-app-security-audit". Create a release summary after all configured checks pass.
Expected outcome:
PASS: Configured application-layer checks completed without blocking or review-level findings. Deployment TLS, proxy behavior, dependencies, and external services remain outside scope.
All 136 static findings are false positives caused by defensive test payloads, explicit local configuration, safe copy operations, or Markdown formatting. Requests use in-process ASGITransport, active probes require owner opt-in, and no credential exfiltration, prompt injection, or malicious intent was found.
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
https://skillstore.io/skills/glenskii-python-web-app-security-audit/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/glenskii-python-web-app-security-audit?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/glenskii-python-web-app-security-audit?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/glenskii-python-web-app-security-audit/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/glenskii-python-web-app-security-audit.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>glenskii. (2026). python-web-app-security-audit security audit report (audit version 2) [Author version 1.1.0]. Skillstore. https://skillstore.io/skills/glenskii-python-web-app-security-audit/audits/2@techreport{glenskii-glenskii-python-web-app-security-audit-2026,
author = {glenskii},
title = {python-web-app-security-audit security audit report (audit version 2)},
institution = {Skillstore},
year = {2026},
number = {2},
url = {https://skillstore.io/skills/glenskii-python-web-app-security-audit/audits/2},
note = {Author version 1.1.0}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "python-web-app-security-audit security audit report (audit version 2)"
version: "1.1.0"
type: report
authors:
- name: "glenskii"
date-released: "2026-08-10"
url: "https://skillstore.io/skills/glenskii-python-web-app-security-audit/audits/2"
identifiers:
- type: other
value: "skillstore:glenskii-python-web-app-security-audit:audit:2"
description: "Skillstore immutable audit report identifier"
Run repeatable security checks before approving a Python service release.
Add focused ASGI security tests to a FastAPI, Django, or adapted Flask project.
Record tested controls, failures, skipped checks, boundaries, and a clear release decision.
Review this Python web application and identify which bundled security checks apply. List required routes, accounts, origins, and test boundaries.
Prepare the security suite for this application. Configure the import path and non-destructive checks, but keep active probes disabled.
Run the configured security tests and analyze each failure. Separate confirmed weaknesses, configuration mistakes, unsupported controls, and skipped checks.
Perform an authorized audit with approved active probes. Produce evidence, severity, remediation, retest status, scope boundaries, and a justified release decision.
Author
glenskiiLicense
MIT
Author version
v1.1.0
Skillstore revision
r2
Ref
8dc0b056b6c0413e53dd66fbd5e2fa5555cce8e0
Maintenance freshness
8/11/2026
Usage
5 downloads · 4 views
File structure
Audit Software Releases with Evidence
Release decisions often rely on incomplete evidence and inconsistent standards. This skill applies structured controls, deterministic scoring, and mandatory gates to assess readiness.
Polish Drafts While Preserving Your Voice
Automated drafts can sound repetitive or overly polished and may lose the writer's original voice. This skill applies minimal editorial fixes while preserving meaning.
Track Long Tasks With a Portable State Ledger
Long technical tasks lose decisions, evidence, and next actions across sessions. This skill maintains a concise Markdown state file with reviewed local evidence references.
Run OWASP Web Security Testing
by sickn33
Web teams need a repeatable way to check common application risks before release. This skill organizes OWASP testing into phases, prompts, and reporting steps.
Audit Code for Security Risks
by Barnhardt-Enterprises-Inc
Security-sensitive code is easy to ship with hidden flaws in authentication, input handling, and secrets. This skill gives Claude, Codex, and Claude Code structured security references and scanner guidance for safer reviews.
Build Python Tests with pytest TDD
by 89jobrien
Python teams often need consistent tests, coverage, and reports without losing TDD discipline. This skill provides pytest-focused workflows, examples, and reporting guidance for Claude, Codex, and Claude Code.
Record and Replay HTTP Tests with pytest
by bossjones
Live API calls make tests slow and unreliable. This skill guides pytest-recording setup, cassette management, secret filtering, and replay debugging.
Build Reliable Async Python
by 0xDarkMatter
Async Python code often fails due to blocking calls, unbounded tasks, and weak cleanup. This skill provides reusable asyncio patterns, examples, and references for robust concurrent services.
Build FastAPI APIs with Reusable Patterns
by 0xDarkMatter
FastAPI projects need consistent choices for validation, dependencies, middleware, and background work. This skill gives Claude, Codex, and Claude Code reusable patterns for practical Python API development.