helpers/skills/python-packaging-bug-finder/SKILL.md
Use when you need to find known packaging bugs, fixes, and workarounds for Python projects by searching GitHub issues and analyzing their resolution status
npx skillsauth add opendatahub-io/ai-helpers python-packaging-bug-finderInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Identifies known packaging and build issues for Python projects by searching GitHub repositories for relevant issues, analyzing their content and comments, and determining resolution status.
When investigating packaging problems for a Python project, follow this workflow:
Use the source finder skill to locate the project's GitHub repository:
Skill: python-packaging-source-finder
Args: <package_name>
If the skill returns a repository URL with high or medium confidence, proceed. If confidence is low or no URL found, stop here and return an error.
Once you have the repository URL, search for packaging-related issues by:
Access the GitHub issues page: Use WebFetch to get the repository's issues page (typically <repo_url>/issues)
Filter for packaging keywords: Look for issues with titles containing:
Prioritize open issues: Focus on open issues first, then closed ones that might affect the target version
For each packaging-related issue found:
Fetch issue details: Use WebFetch to get the full issue page including:
Extract key information:
Look for resolution indicators:
For each issue, determine:
Does it affect the target version?
What's the resolution status?
Provide a structured analysis:
# Packaging Issues Analysis for <package_name> [version]
## Repository
- URL: <repository_url>
- Confidence: <high/medium/low>
## Issues Found: X total
### [Issue Status] Issue Title
- **URL**: <issue_url>
- **Status**: Open/Closed
- **Labels**: <relevant_labels>
- **Problem**: <brief_description>
- **Affects Target Version**: Yes/No/Unknown
- **Resolution**:
- Type: Fixed/Pending/Workaround/Unresolved
- Details: <fix_description>
- Available in: <version_if_applicable>
- **Workarounds**: <list_of_workarounds>
- **Recommendation**: <action_to_take>
## Summary
- Total packaging issues: X
- Affecting target version: X
- With available fixes: X
- With workarounds only: X
- Unresolved: X
The bug finder provides critical context for making informed decisions about package building, version selection, and issue avoidance strategies.
python-packaging-source-finder to locate the repo first — if that returns low confidence or no URL, the skill stops without searching any issues.development
Run hexora static analysis on a Python package repository to detect suspicious code patterns, then triage findings with deterministic rules and AI reasoning to produce a structured risk report section.
development
Inspect recent git history of a Python package repository for suspicious commits touching supply-chain-sensitive files, then triage findings with AI reasoning to produce a structured risk report section.
development
Scan a Python package repository for compiled/binary files using Fromager-style detection and malcontent YARA analysis, then triage findings with deterministic rules and AI reasoning to produce a structured risk report section.
testing
Use this skill to identify non-Red Hat RPM packages installed in container images or on the local machine. For containers, pulls images across multiple architectures and release tags; for local scans, inspects the host directly. Extracts RPM signing metadata and reports packages not signed with the Red Hat GPG key as CSV output. Use when auditing compliance, checking supply-chain provenance, or scanning for third-party RPMs in RHOAI component images.