[bandit]
# subprocess is used intentionally in CLI wrappers and linter integrations.
skips = B404,B603
