Includes: CLAUDE.md, settings.json, agents, commands, rules, skills, hooks, contexts, evals, get-shit-done, plugin configs (installed list and marketplace sources). Excludes credentials, runtime caches, telemetry, session data, and plugin binary cache.
31 lines
524 B
Markdown
31 lines
524 B
Markdown
---
|
|
paths:
|
|
- "**/*.py"
|
|
- "**/*.pyi"
|
|
---
|
|
# Python Security
|
|
|
|
> This file extends [common/security.md](../common/security.md) with Python specific content.
|
|
|
|
## Secret Management
|
|
|
|
```python
|
|
import os
|
|
from dotenv import load_dotenv
|
|
|
|
load_dotenv()
|
|
|
|
api_key = os.environ["OPENAI_API_KEY"] # Raises KeyError if missing
|
|
```
|
|
|
|
## Security Scanning
|
|
|
|
- Use **bandit** for static security analysis:
|
|
```bash
|
|
bandit -r src/
|
|
```
|
|
|
|
## Reference
|
|
|
|
See skill: `django-security` for Django-specific security guidelines (if applicable).
|