Install
$ agentstack add skill-canvas-xxx-agent-skills-python-engineer ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ● Shell / process execution Used
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Python Engineer
Guide Python engineering work with senior judgment: read the project first, choose boring maintainable designs, preserve local conventions, and validate the changed behavior.
When to Use
Use this skill for Python application or library work: project structure, API design, implementation, refactoring, debugging, code review, type hints, tests, linting, packaging, async/concurrency, CLIs, web services, data processing, database access, and architecture decisions.
Use a narrower skill when the request is mainly generic debugging, security audit, TDD process, stakeholder writing, or a framework-specific workflow where Python design judgment is only incidental.
Artifacts
- Produces: code changes
- Consumes: stories at the
storykey path (if present) — seereferences/artifact-paths.md(defaultdocs/stories/.md),.context/project.md,.context/engineering.md,.context/git-workflow.md,.context/security.md,.context/learning.md
Core Rule
Prefer the repository's existing package manager, layout, formatter, linter, type checker, test runner, dependency style, logging approach, and error patterns over generic Python examples.
Quick Path
Answer directly for conceptual questions, explanations, single-line fixes, or small snippets. Do not run the full project-context workflow unless you are generating, modifying, reviewing, or debugging project code.
Workflow
- Inspect local context before changing code:
.context/INDEX.mdwhen present,
relevant domain files such as .context/project.md, .context/engineering.md, .context/git-workflow.md, .context/security.md, .context/learning.md, and .context/adr/, plus pyproject.toml, setup.cfg, setup.py, requirements*.txt, lockfiles, source layout, tests, and nearby implementation patterns.
- Load only the reference files needed for the task from the Reference Map.
- For structural or cross-module changes, state the problem shape, ownership
boundary, key tradeoff, and validation plan before editing.
- Make the smallest cohesive change that preserves existing behavior unless the
user requested a behavior change.
- Keep public interfaces typed, boring, and stable; narrow
Anynear the edge. - Put domain logic outside framework, database, HTTP, CLI, and subprocess
boundaries where practical.
- Add or update tests at the same boundary callers use, with mocks only around
true external systems.
- Validate with the repo's focused test, lint, format, typecheck, build, or
runtime check when practical.
Engineering Defaults
- Prefer explicit dependencies through constructors or functions over hidden
module-level coupling.
- Use functions for stateless transformations and classes for meaningful state,
resource lifecycle, protocols, domain concepts, or replaceable adapters.
- Keep serialization, validation, SQL, filesystem paths, subprocess commands,
network calls, and secrets at clear boundaries.
- Make resource ownership explicit for files, clients, pools, tasks, and
background workers.
- Add dependencies only when the standard library or current project stack would
make the code meaningfully worse.
Reference Map
Load only the reference needed for the current decision:
references/design-and-structure.md: architecture, module boundaries,
functions vs classes, data modeling, errors, or dependency choices.
references/typing-and-naming.md: type hints, Protocols, TypedDict,
dataclasses, naming conventions, or import hygiene.
references/linting-tooling.md: Ruff, Black, pyright, mypy, pytest config,
packaging metadata, or CI commands.
references/testing.md: unit tests, integration tests, mocks/fakes, fixtures,
regression tests, or async tests.
references/async-security-reliability.md: asyncio, concurrency, resource
cleanup, subprocesses, SQL, paths, secrets, retries, or timeouts.
Output Shape
- Small fix: changed code plus one sentence explaining the issue.
- New feature or refactor: decision note, tests, implementation, validation.
- Code review: findings first with file and line references, then test gaps.
- Architecture question: options, recommendation, tradeoffs, and migration path.
- Tooling setup: chosen tools, config changes, and commands to run.
Next Step
Do not treat a change as done until the project's formatter, linter, type checker, and test suite pass on it.
- If approved: hand off to
tddwhen the change needs behavior tests it does not have, toscrutinizefor an independent review of the diff, or tosecurity-auditwhen it touches auth, secrets, subprocess calls, deserialization, or user input. - If not approved: revise in place. When a failure's cause is not obvious from the traceback, escalate to
diagnoserather than guessing at fixes.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: ntwrcht
- Source: ntwrcht/blvck-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.