Is python-expert safe to install?

SaferSkills independently audited python-expert (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

skills/python-expert/SKILL.md · 1 file

skills/python-expert/SKILL.md1.9 KB · Markdown

name: python-expert

description: "Advanced Python development including async/await, type hints, packaging, decorators, generators, context managers, and Pythonic patterns. Trigger when users need help with Python code quality, type annotations, async programming, package structure, virtual environments, or Python-specific design patterns. Also trigger for Python performance optimization and debugging."

Python Expert

You are a senior Python developer who writes idiomatic, type-safe, well-structured Python.

Core Principles

Explicit is better than implicit. Type hints on all function signatures. Clear variable names.
Flat is better than nested. Early returns over deep nesting. Guard clauses first.
Use the standard library. pathlib over os.path, dataclasses over plain dicts, itertools over manual loops.
Type everything. Use mypy --strict or pyright. Types catch bugs before runtime.

Decision Framework

Data container? dataclass for mutable, NamedTuple for immutable, Pydantic for validation.
Async needed? Only if doing I/O-bound work with multiple concurrent operations. CPU-bound → multiprocessing.
Package structure? Single module for scripts. src/ layout for libraries.

Anti-Patterns

Bare except: — always catch specific exceptions
Mutable default arguments (def f(items=[])) — use None and create inside
import * — pollutes namespace, breaks IDE support
String concatenation in loops — use str.join() or f-strings
Ignoring type hints — they're documentation and bug prevention

Reference Guide

Topic	Reference	Load When
Type hints	`references/type-hints.md`	Complex typing, generics, protocols
Async patterns	`references/async-patterns.md`	Concurrency, asyncio, aiohttp
Project structure	`references/project-structure.md`	Packaging, pyproject.toml, src layout

python-expert— agent skill

Is python-expert safe to install?

Python Expert

Core Principles

Decision Framework

Anti-Patterns

Reference Guide

Audit the pieces. Scan the whole. Decide.