cofin/python
skills/python/SKILL.md
Use when editing Python files, pyproject.toml, requirements.txt, setup.py, setup.cfg, uv workflows, ruff, mypy, typing, packaging, scripts, Cython, or Mypyc extension builds.
$ install --global
skillsauthnpx skillsauth add cofin/flow pythonInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 27, 2026, 5:42 AM174.6s7 files scanned
SKILL.md
- name:
- python
- description:
- Use when editing Python files, pyproject.toml, requirements.txt, setup.py, setup.cfg, uv workflows, ruff, mypy, typing, packaging, scripts, Cython, or Mypyc extension builds.
Python Skill
Overview
Expert knowledge for Python development in this workspace. This skill aggregates tooling, build systems, and quality standards.
Core Standards
As per workspace rules, the following are MANDATORY:
- Tooling:
uvis the required tool for Python package and environment management. - Execution: Always run python programs with the
uv runprefix. - Installation: Use
uvwithpyproject.tomland install to a virtual environment. - Typing: Use
>=3.10types as per PEP 585 (e.g.,dict,listinstead oftyping.Dict,typing.List). - Comments: Prefer docstrings and type annotations over inline comments. Use inline comments only when the logic is non-obvious and cannot be clarified through better naming or type hints.
<workflow>
References Index
For detailed guides on specific tools and sub-systems, refer to the following documents:
Package & Project Management
uvGuide- Initializing projects, managing dependencies, workspaces, and tool execution (
uvx).
- Initializing projects, managing dependencies, workspaces, and tool execution (
Code Quality
- Quality Standards
- Ruff, Mypy, and Pyright configurations.
Build Systems & compiled Extensions
- Building & Packaging
- Standalone binaries, patching, and distributing.
- Cython Extensions
- Compiling C extensions for performance.
- Mypyc Extensions
- Mypyc-compatible classes and compilation workflows.
Example: pyproject.toml Setup
[project]
name = "myapp"
version = "0.1.0"
requires-python = ">=3.12"
dependencies = ["litestar>=2.0", "sqlalchemy>=2.0"]
[tool.uv]
dev-dependencies = ["pytest>=8.0", "ruff>=0.8", "mypy>=1.13"]
[tool.ruff]
target-version = "py312"
line-length = 120
[tool.ruff.lint]
select = ["ALL"]
ignore = ["D", "ANN101"]
[tool.mypy]
strict = true
python_version = "3.12"
Official References
- https://docs.astral.sh/uv/
- https://docs.astral.sh/ruff/
- https://mypy.readthedocs.io/
- https://mypyc.readthedocs.io/
Shared Styleguide Baseline
- Use shared styleguides for generic language/framework rules to reduce duplication in this skill.
- General Principles
- Python
- Keep this skill focused on tool-specific workflows, edge cases, and integration details.
Add guardrails instructions here. </guardrails>
<validation> ## ValidationAdd validation instructions here. </validation>
Related Skills
cofin/tracer
development
VerifiedTrustedCommunity
Use when tracing execution paths, mapping dependencies, understanding unfamiliar code, following data flow, investigating end-to-end behavior, debugging call chains, or deciding which files to read next.
12SKILL.mdUpdated Jun 7, 2026
cofin/security-auditor
development
VerifiedTrustedCommunity
Use when reviewing authentication, authorization, user input, secrets, API keys, database queries, file uploads, session management, external API calls, OWASP risks, or data handling attack surface.
12SKILL.mdUpdated Jun 7, 2026
cofin/perspectives
testing
VerifiedTrustedCommunity
Use when analyzing tradeoffs, comparing approaches, weighing options, assessing risks, stress-testing conclusions, identifying blind spots, or applying multiple viewpoints to a decision.
12SKILL.mdUpdated Jun 7, 2026
cofin/performance-analyst
development
VerifiedTrustedCommunity
Use when reviewing hot paths, slow code, database queries, N+1 risks, memory usage, loops, I/O, caching strategy, concurrency, latency-sensitive paths, or resource efficiency.
12SKILL.mdUpdated Jun 7, 2026