AgentStack
SKILL verified MIT Self-run

Python Engineer

skill-canvas-xxx-agent-skills-python-engineer · by ntwrcht

Builds, modifies, reviews, and debugs Python projects with architecture, packaging, typing, testing, linting, async, data access, and reliability guidance. Use when working on Python application code, libraries, CLIs, services, tooling, refactors, test strategy, or code review.

No reviews yet
0 installs
5 views
0.0% view→install

Install

$ agentstack add skill-canvas-xxx-agent-skills-python-engineer

✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution Used
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

Are you the author of Python Engineer? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Python Engineer

Guide Python engineering work with senior judgment: read the project first, choose boring maintainable designs, preserve local conventions, and validate the changed behavior.

When to Use

Use this skill for Python application or library work: project structure, API design, implementation, refactoring, debugging, code review, type hints, tests, linting, packaging, async/concurrency, CLIs, web services, data processing, database access, and architecture decisions.

Use a narrower skill when the request is mainly generic debugging, security audit, TDD process, stakeholder writing, or a framework-specific workflow where Python design judgment is only incidental.

Artifacts

  • Produces: code changes
  • Consumes: stories at the story key path (if present) — see references/artifact-paths.md (default docs/stories/.md), .context/project.md, .context/engineering.md, .context/git-workflow.md, .context/security.md, .context/learning.md

Core Rule

Prefer the repository's existing package manager, layout, formatter, linter, type checker, test runner, dependency style, logging approach, and error patterns over generic Python examples.

Quick Path

Answer directly for conceptual questions, explanations, single-line fixes, or small snippets. Do not run the full project-context workflow unless you are generating, modifying, reviewing, or debugging project code.

Workflow

  1. Inspect local context before changing code: .context/INDEX.md when present,

relevant domain files such as .context/project.md, .context/engineering.md, .context/git-workflow.md, .context/security.md, .context/learning.md, and .context/adr/, plus pyproject.toml, setup.cfg, setup.py, requirements*.txt, lockfiles, source layout, tests, and nearby implementation patterns.

  1. Load only the reference files needed for the task from the Reference Map.
  2. For structural or cross-module changes, state the problem shape, ownership

boundary, key tradeoff, and validation plan before editing.

  1. Make the smallest cohesive change that preserves existing behavior unless the

user requested a behavior change.

  1. Keep public interfaces typed, boring, and stable; narrow Any near the edge.
  2. Put domain logic outside framework, database, HTTP, CLI, and subprocess

boundaries where practical.

  1. Add or update tests at the same boundary callers use, with mocks only around

true external systems.

  1. Validate with the repo's focused test, lint, format, typecheck, build, or

runtime check when practical.

Engineering Defaults

  • Prefer explicit dependencies through constructors or functions over hidden

module-level coupling.

  • Use functions for stateless transformations and classes for meaningful state,

resource lifecycle, protocols, domain concepts, or replaceable adapters.

  • Keep serialization, validation, SQL, filesystem paths, subprocess commands,

network calls, and secrets at clear boundaries.

  • Make resource ownership explicit for files, clients, pools, tasks, and

background workers.

  • Add dependencies only when the standard library or current project stack would

make the code meaningfully worse.

Reference Map

Load only the reference needed for the current decision:

  • references/design-and-structure.md: architecture, module boundaries,

functions vs classes, data modeling, errors, or dependency choices.

  • references/typing-and-naming.md: type hints, Protocols, TypedDict,

dataclasses, naming conventions, or import hygiene.

  • references/linting-tooling.md: Ruff, Black, pyright, mypy, pytest config,

packaging metadata, or CI commands.

  • references/testing.md: unit tests, integration tests, mocks/fakes, fixtures,

regression tests, or async tests.

  • references/async-security-reliability.md: asyncio, concurrency, resource

cleanup, subprocesses, SQL, paths, secrets, retries, or timeouts.

Output Shape

  • Small fix: changed code plus one sentence explaining the issue.
  • New feature or refactor: decision note, tests, implementation, validation.
  • Code review: findings first with file and line references, then test gaps.
  • Architecture question: options, recommendation, tradeoffs, and migration path.
  • Tooling setup: chosen tools, config changes, and commands to run.

Next Step

Do not treat a change as done until the project's formatter, linter, type checker, and test suite pass on it.

  • If approved: hand off to tdd when the change needs behavior tests it does not have, to scrutinize for an independent review of the diff, or to security-audit when it touches auth, secrets, subprocess calls, deserialization, or user input.
  • If not approved: revise in place. When a failure's cause is not obvious from the traceback, escalate to diagnose rather than guessing at fixes.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Versions

  • v0.1.0 Imported from the upstream source.