PyCQA/bandit ? reverse-engineered prompt

Build me a Python security linter that scans source files for common security problems and prints a clear report at the end.

I want it to walk through one file or a whole project, parse each Python file into an AST, run a set of checks on the code, and flag risky patterns like insecure imports or dangerous calls. It should feel easy to use from the command line, with simple output that tells me what file has the issue, what line it’s on, and why it matters.

Please include a few example checks, a clean way to add more later, and basic tests so I can trust the results. If helpful, look up current docs online for AST handling and packaging details. Keep it lightweight and practical, and make sure it works well as a standalone security tool for Python projects.