AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Sp Recommends

skill-henryiii-skills-sp-recommends · by henryiii

Review code quality and packaging usuing sp-repo-review for Scientific Python projects

No reviews yet
0 installs
23 views
0.0% view→install

Install

$ agentstack add skill-henryiii-skills-sp-recommends

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-henryiii-skills-sp-recommends)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
1mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Sp Recommends? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Responding to Scientific Python Repository Recommendations

This skill uses the sp-repo-review tool and helps users address common issues.

Before You Start

To use this skill, you need uv (specifically, the uvx runner that uv ships with).

Step 1: Initial touchup.

Look for some basic things that repos should be doing, and report to the user if needed:

  • Project should have pyproject.toml
  • Project should have .pre-commit-config.yaml

These are recommendations from the Scientific Python guide that don't have automated checks. Apply these first:

  • For nox users: use uv|virtualenv as the default backend (or uv only)
  • For GHA: set FORCE_COLOR: 3 or --forcecolor for color output. Don't worry aboud changing it if already set.
  • For GHA: set up a "pass job" using re-actors/alls-green for auto-merge support
  • For GHA: configure .github/release.yml for changelog generation
  • cibuildwheel: Use build[uv] as the build frontend for faster builds
  • pre-commit: Use schema validation tools (validate-pyproject, check-jsonschema)
  • pre-commit: Consider spell checkers (codespell or typos) if not in pre-commit
  • pre-commit: Consider shellcheck for shell scripts

Step 2: Dependency-groups

If there is no [dependency-groups] section (described in PEP 723) in pyproject.toml, you should see if there are developer-focused extras ([project.optional-dependencies]) that can be moved, like docs, tests, or dev. For dependency-groups, one can reference another with an inline table, like dev = [{ include-group = "test" }]. It's quite common to want the dev group to be built from other groups.

All mentions of developer extras like [tests], [docs], and [dev] need to be converted to --group tests and the like. Most tools have integrated support for dependency groups in their configuration, like tox and cibuildwheel. Nox supports --group if pip/uv is new enough, which is probably fine.

Step 3: sp-repo-review

Run the tool to see what recommendations apply:

# Get structured JSON output for easier parsing
uvx "sp-repo-review[cli]" --format json | jq -r '.checks | to_entries[] | select(.value.result == false) | "\(.key): \(.value.description)"'

# Or see the human-readable output
uvx --with "sp-repo-review[cli]" sp-repo-review --show err .

Focus on checks with result: false - these need fixes. Checks with empty result and skip_reason are skipped because a prerequisite failed (fix the prerequisite first).

Only fix things that are fairly easy, and report any harder failures to the user.

A few notes to keep in mind with certain issues:

Ruff checks

  • If the user doesn't have all the recommended Ruff codes, you can run this to get recommendations:
uvx --from "sp-repo-review[cli]" sp-ruff-checks

If the user is using "ALL", then this suggests some optional ignores that are just sometimes needed.

Dependabot

An example dependabot file is in assets/dependabot.yml.

GitHub Releases

An example release file is in assets/release.yml.

Nox version

If you add a dependencies at the top, remember to use nox.needs_version's version as the minimum version there.

Step 4: Verification

After making changes, verify:

# Run the full check
uvx "sp-repo-review[cli]" --show err

# Run the pre-commit checks
prek -a --quiet

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.