.github/skills/coding-standards/python-foundational/SKILL.md
Foundational Python best practices, idioms, and code quality fundamentals - Brought to you by microsoft/hve-core
npx skillsauth add microsoft/hve-core python-foundationalInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Foundational Python excellence that every diff must satisfy. This skill is loaded first for any .py change. All higher-order skills build on it.
This content is a skill rather than an instructions file for three reasons: skills are distributed through the CLI plugin and VS Code extension without requiring consumers to copy files into their repo; new language skills can be added without modifying the review agent itself; and skills are loaded on demand, keeping the context window small when the diff contains no Python.
PascalCase classes, snake_case functions/variables, UPPER_SNAKE_CASE constants, _ private members.with for files, locks, DB connections.dataclass / NamedTuple / Enum for data holders.pathlib over os.path; timezone-aware datetime when relevant.* keyword-only arguments for multi-optional functions.global/nonlocal unless strictly required.TypeVar for generics.Any except in thin wrappers.except: (broad except Exception: only at app boundaries with logging).eval, exec, or pickle on untrusted data.print.| File | Covers | Purpose | |-------------------------------------------------------------|--------------|-----------------------------------------------------------------------------------------| | design-principles.md | Section 9 | Rationale and examples for the design principles | | code-style-patterns.md | Sections 1–5 | Concrete code examples for style, idioms, type safety, class design, and error handling |
| Severity | Definition | |----------|----------------------------------------------------------------------------------------------------------| | High | Causes incorrect behavior, data loss, or security exposure at runtime | | Medium | Degrades maintainability, readability, or violates a project convention with no immediate runtime impact | | Low | Cosmetic, stylistic, or minor improvement opportunity |
| Symptom | Check |
|------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Skill not loaded | Confirm the diff contains .py files. The agent selects skills by matching file types in the changed files against skill descriptions. |
| No findings generated | Verify the Skills Loaded footer in the review output lists python-foundational. If listed but no findings appear, the diff may already satisfy the checklist. |
| Severity seems miscalibrated | Compare against the Severity Rubric above. High requires runtime impact; medium is maintainability-only. |
Follow these conventions when extending this skill:
references/ and provide examples or rationale for the covered checklist items. Each reference file covers a contiguous range of sections. Update the References table when adding a new file.async-patterns.md). Include a frontmatter description that states which sections the file supports. Add a row to the References table in SKILL.md.🤖 Crafted with precision by ✨Copilot following brilliant human instruction, then carefully refined by our team of discerning human reviewers.
tools
Generates PR reference XML containing commit history and unified diffs between branches with extension and path filtering. Includes utilities to list changed files by type and read diff chunks. Use when creating pull request descriptions, preparing code reviews, analyzing branch changes, discovering work items from diffs, or generating structured diff summaries. - Brought to you by microsoft/hve-core
development
Format specifications and data contracts for the security reviewer orchestrator and its subagents - Brought to you by microsoft/hve-core.
development
Secure by Design principles knowledge base for assessing adherence to security-first design, development, and deployment practices across the software lifecycle - Brought to you by microsoft/hve-core.
development
OWASP Top 10 for Web Applications (2025) vulnerability knowledge base for identifying, assessing, and remediating security risks in web application environments - Brought to you by microsoft/hve-core.