PyCQA

An AST-based security linter for Python that flags common insecure patterns such as unsafe deserialization, shell injection and weak crypto.