narumiruna/python-packaging-uv
skills/python-packaging-uv/SKILL.md
Use when building or publishing Python packages with uv, including dist artifacts and pre-publish checks.
$ install --global
skillsauthnpx skillsauth add narumiruna/agent-skills python-packaging-uvInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 28, 2026, 11:49 AM123.9s2 files scanned
SKILL.md
- name:
- python-packaging-uv
- description:
- Use when building or publishing Python packages with uv, including dist artifacts and pre-publish checks.
Python Packaging with uv
Overview
Use uv build and publish commands to produce wheels/sdists and ship to package indexes. Core principle: build from release-ready sources, verify artifacts, test installation, then publish.
Use When
- Building wheels or source distributions.
- Preparing release artifacts with uv.
- Publishing to Test PyPI or PyPI.
- Verifying package contents or installation behavior before release.
Quick Reference
| Task | Command |
| --- | --- |
| Build wheel+sdist | uv build |
| Build wheel only | uv build --wheel |
| Build for release (ignore local path overrides) | uv build --no-sources |
| Publish to PyPI | uv publish --token $PYPI_TOKEN |
| Publish to Test PyPI | uv publish --publish-url https://test.pypi.org/legacy/ --token $TEST_PYPI_TOKEN |
| Inspect wheel contents | unzip -l dist/<wheel>.whl |
| Test wheel install | uv run --with dist/<wheel>.whl python -c "import <module>" |
Workflow
- Run the repository quality gate before release.
- Build artifacts in
dist/withuv build --no-sources. - Inspect wheel and sdist contents.
- Test install from the built wheel in a fresh uv-managed invocation.
- Publish to Test PyPI for first or risky releases, validate install/import, then publish to PyPI.
Example
prek run -a
uv build --no-sources
unzip -l dist/my_package-1.0.0-py3-none-any.whl
uv run --with dist/my_package-1.0.0-py3-none-any.whl python -c "import my_package"
uv publish --publish-url https://test.pypi.org/legacy/ --token $TEST_PYPI_TOKEN
Common Mistakes
- Publishing before verifying wheel contents.
- Skipping Test PyPI for first release.
- Building release artifacts while local
[tool.uv.sources]overrides are active. - Verifying only the source tree instead of importing from the built wheel.
Red Flags
- Packaging guidance that ignores uv build/publish.
- Publishing commands shown before quality checks and artifact verification.
References
references/packaging.md- Build and publish details
Related Skills
narumiruna/memory-md
development
VerifiedTrustedCommunity
Maintains concise repository MEMORY.md notes for gotchas, stale memory corrections, and durable user preferences. Use at the start of repository conversations, when the user mentions MEMORY.md, when an error should be remembered to avoid repeating it, or when MEMORY.md content may be wrong.
7SKILL.mdUpdated May 18, 2026
narumiruna/work-log-writer
testing
VerifiedTrustedCommunity
Use only when the user explicitly names the work-log-writer skill; never auto-activate from generic work log, daily log, EOD summary, status update, or date-range summary requests.
7SKILL.mdUpdated May 18, 2026
narumiruna/test-driven-development
development
VerifiedTrustedCommunity
Use when implementing non-trivial code changes that should follow TDD (write a failing test first, make the smallest passing change, then refactor safely).
7SKILL.mdUpdated May 18, 2026
narumiruna/codex-cli-hooks
tools
VerifiedTrustedCommunity
Use when designing, implementing, reviewing, or debugging Codex CLI hooks, including `hooks.json`, `.codex/hooks.json`, feature-flag setup, matcher behavior, event-specific stdin/stdout payloads, and hook scripts for `SessionStart`, `PreToolUse`, `PostToolUse`, `UserPromptSubmit`, or `Stop`.
7SKILL.mdUpdated May 18, 2026