modern-python

modern-python18 wordsInspect firstinspect-then-install

Curated third-party skill source. Run external-skill-auditor before repo promotion.

Quick Start

Install:

npx skills add trailofbits/skills --skill differential-review --skill agentic-actions-auditor --skill variant-analysis --skill insecure-defaults --skill supply-chain-risk-auditor --skill modern-python -y -g -a antigravity claude-code codex crush cursor gemini-cli github-copilot grok opencode

Use: /modern-python

Works with Claude Code, Gemini CLI, OpenCode, and other agentskills.io-compatible agents.

Curated external (hand-maintained)

Composed compose-external-wave-8 using authoring SSOT (docs/src/authoring/skills/modern-python.mdx) + research. Do not run wagents docs generate on this file (HAND-MAINTAINED sentinel). Run external-skill-auditor before using in production or promoting.

What It Does

Configures and migrates Python projects to modern tooling: uv (deps/venv/tooling, replaces pip/pipx/poetry), ruff (unified lint+format), ty (fast type checking replacing mypy), pytest+cov, prek (fast pre-commit). Includes SessionStart hook to intercept legacy python/pip/pipx cmds and redirect. Security: detect-secrets, shellcheck, actionlint, zizmor, pip-audit, Dependabot. PEP 723 scripts, pyproject.toml, src layout, 3.11+. Based on trailofbits/cookiecutter-python.

Harness Coverage

Targets verified harnesses: antigravity, claude-code, codex, crush, cursor, gemini-cli, github-copilot, grok, opencode.

Portable multi-harness install command:

npx skills add trailofbits/skills --skill differential-review --skill agentic-actions-auditor --skill variant-analysis --skill insecure-defaults --skill supply-chain-risk-auditor --skill modern-python -y -g -a antigravity claude-code codex crush cursor gemini-cli github-copilot grok opencode

Trust / Audit

Trust tier: Inspect first (needs-inspection)

Curated status: inspect-then-install

Risk notes: Curated third-party skill source. Run external-skill-auditor before repo promotion.

Entry maintained via authoring + research for compose-external-wave-8; provenance and audit notes are authoritative there (research context is advisory).

Install Prerequisites

npx skills add trailofbits/skills --skill modern-python -y -g ... status=inspect-then-install; selector=named.

Public Metadata

Field	Value
Source Type	curated-external
Display Source	trailofbits/skills
Source Kind	github
Installability	portable command
Review State	curated
Trust Tier	needs-inspection
Target Agents	antigravity, claude-code, codex, crush, cursor, gemini-cli, github-copilot, grok, opencode

General

Field	Value
Name	modern-python

Curated catalog entry

docs/src/authoring/skills/modern-python.mdx (full SSOT excerpt)

---
name: "modern-python"
description: "Curated third-party skill source. Run external-skill-auditor before repo promotion."
title: "Modern Python"
source_kind: "curated-external"
source: "trailofbits/skills"
install_source: "trailofbits/skills"
status: "inspect-then-install"
trust_tier: "needs-inspection"
provenance_status: "verified-install-command"
install_command: "npx skills add trailofbits/skills --skill differential-review --skill agentic-actions-auditor --skill variant-analysis --skill insecure-defaults --skill supply-chain-risk-auditor --skill modern-python -y -g -a antigravity claude-code codex crush cursor gemini-cli github-copilot grok opencode"
target_agents: [antigravity, claude-code, codex, crush, cursor, gemini-cli, github-copilot, grok, opencode]
source_url: "https://github.com/trailofbits/skills"
notes: "Curated third-party skill source. Run external-skill-auditor before repo promotion."
risk_notes: "Curated third-party skill source. Run external-skill-auditor before repo promotion."
promotion_policy: "Inspect source, hooks, scripts, credentials, and dedupe before install."
provenance_evidence: "Curated `npx skills add` command with named `--skill` selectors under `inspect-then-install` in config/external-skills.md."
---

{/* GENERATED-AUTHORING: source=config/external-skills.md; entry=modern-python; re-run migration to refresh */}

Curated third-party skill source. Run external-skill-auditor before repo promotion.

Install / provenance (from authoring frontmatter + research):

Field	Value
install_command	npx skills add trailofbits/skills --skill differential-review --skill agentic-actions-auditor --skill variant-analysis --skill insecure-defaults --skill supply-chain-risk-auditor --skill modern-python -y -g -a antigravity claude-code codex crush cursor gemini-cli github-copilot grok opencode
source	trailofbits/skills
source_url	https://github.com/trailofbits/skills
trust_tier	needs-inspection
curated_status	inspect-then-install
target_agents	antigravity, claude-code, codex, crush, cursor, gemini-cli, github-copilot, grok, opencode

Resources

Skill Catalog Browse custom and external skills.

CLI Reference Install and manage skills.