[bandit]
# B110/B112: reviewed best-effort cleanup and optional parsing operations.
# B603: subprocess receives an argument list and does not invoke a shell.
# B608: flagged strings are HTML templates, not SQL queries.
skips = B110,B112,B603,B608
