python-types-contracts — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited python-types-contracts (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
A bulleted imperative like {match} tells the agent to never reveal, disclose, or mention something to the user. Used adversarially it can instruct the agent to hide its tool calls or lie about what it did — stripping the transparency a user relies on to trust the agent.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Treat type hints as interface design, not decoration. Focus on explicit contracts, stable public APIs, and boundary-safe modeling.
These are preferred defaults for common cases, not universal rules. When a default conflicts with project constraints, suggest a better-fit alternative and explain tradeoffs and compensating controls.
Any, object, or untyped dicts where narrower types apply.When NOT to use:
Protocol for structural subtyping over deep inheritance hierarchies.Internal helpers don't need the same rigor as public APIs. Over-annotating private code adds noise without safety.
Using pydantic models for internal data flow instead of reserving them for validation at trust boundaries (API ingress, config loading, external data).
Returning Any or dict from public functions forces callers to guess structure. Return concrete types or TypedDicts.
Changing function signatures, removing fields, or narrowing accepted types without versioning, deprecation warnings, or migration notes.
Omitting Optional or union with None when a value can legitimately be absent, hiding null-safety bugs until runtime.
python-design-modularity.references/typing-policy.mdreferences/contract-evolution.mdreferences/pydantic-boundaries.md~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.