python-conventions 100/100

Is python-conventions safe to install?

SaferSkills independently audited python-conventions (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

skills/python-conventions/SKILL.md · 1 file

skills/python-conventions/SKILL.md1.4 KB · Markdown

name: python-conventions

description: Apply Python conventions — uv, Ruff strict, mypy strict, pytest, pip-audit.

allowed-tools: Read, Edit, Write, Grep, Glob, Bash(uv *), Bash(uv run ruff *), Bash(uv run mypy *), Bash(uv run pytest *), Bash(uv run pip-audit *), Bash(uv run vulture *), Bash(uv run python *)

globs: "**/*.py"

paths: "**/*.py"

Default Stack

If the repo doesn't define its own tooling, use:

UV — dependency management, builds, running scripts
GitHub Actions — CI/CD
Ruff — linting and formatting, with these rule sets:
E (pycodestyle errors), F (pyflakes), I (isort), UP (pyupgrade)
B (flake8-bugbear), SIM (flake8-simplify), PTH (pathlib)
PIE (flake8-pie), RUF (ruff-specific), T201 (no print)
PLC0415 (import-outside-toplevel)
mypy — strict mode (strict = true, warn_return_any = true, warn_unused_configs = true)
pytest — testing (pytest-cov, pytest-asyncio)
vulture — dead code detection
pip-audit — dependency security audit

Scratch Testing

ALWAYS use `test.py` in project root for:

Ad-hoc testing, API calls, data exploration
Any Python code that isn't a formal test or production code
NEVER use inline Python heredocs via Bash (uv run python3 << 'EOF')

Write code to test.py, then run with uv run python test.py. Comment out previous code — keeps history. Gitignored — never commit.

python-conventions— agent skill

Is python-conventions safe to install?

Default Stack

Scratch Testing

Audit the pieces. Scan the whole. Decide.