skills.rest
adriancodes
adriancodesCOMMUNITY
Explore all skills by this author →
GitHub

ecc-python-reviewer

Reviews Python patches for security, typing, exception flow, concurrency, and resource lifetime defects.

Updated Apr 18, 2025
Search Tags:#static analysis#code review#security#python#concurrency#exception handling#typing
One-click install
npx skills add https://github.com/adriancodes/dotfiles --skill ecc-python-reviewer-adriancodes
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ecc-python-reviewer
Source: https://github.com/adriancodes/dotfiles/tree/main/dot_agents/skills/ecc-python-reviewer
Command: npx skills add https://github.com/adriancodes/dotfiles --skill ecc-python-reviewer-adriancodes

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Reviewing Python patches by hand often misses subtle defects in exception propagation, resource cleanup, concurrency, and security boundaries. This Skill provides a structured, read-only review workflow that produces severity-ordered, evidence-grounded findings instead of vague style opinions. ## Core Features & Use Cases - Security Review: Traces interpolated SQL, subprocess arguments, file path containment, and exposed secrets through the changed code. - Correctness Review: Checks exception handling, resource lifetimes, type contracts, shared mutable state, and async/concurrency hazards. - Framework Checks: Covers Django, FastAPI, and Flask specifics such as transaction invariants, Pydantic model separation, and CSRF handling. - Use Case: A teammate submits a pull request touching database access and async handlers. Ask for a review and receive findings with file/line, trigger, consequence, and fix direction, plus a list of evidence gaps. ## Quick Start Review this Python patch for security, typing, exception handling, and concurrency defects and report severity-ordered findings.

Frequently Asked Questions about ecc-python-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a Python patch for security issues?▼

Trace interpolated SQL into database APIs, untrusted input into subprocess or eval, and user-selected file paths against an authorized root. This Skill performs that tracing read-only and reports findings with file/line, trigger, and fix direction.

What does a read-only Python code review check?▼

It checks exception handling, resource cleanup, type contracts, concurrency hazards, and framework boundaries for Django, FastAPI, and Flask. It inspects code and supplied diagnostics without running tests, linters, or the application itself.

Can this review run mypy, ruff, or pytest automatically?▼

No. The workflow is strictly read-only and never executes builds, tests, linters, or package managers. It instead reviews caller-supplied output from tools like mypy, ruff, bandit, or pytest as evidence.

Does the review cover async and concurrency bugs in Python?▼

Yes. It traces shared mutable state across threads and tasks, flags blocking I/O on the event loop, missing awaits, lost task failures, and cancellation swallowing, matching synchronization primitives to the ownership model.

What are the limitations of a read-only code review?▼

It cannot confirm runtime behavior, so unverified claims are labeled as hypotheses and missing diagnostics are reported as evidence gaps. Absence of findings does not prove tests passed or that the patch is safe to merge.

Related Skills

Explore More Software Engineering Skills→
bbaserdembbaserdem
2

django-verification

Automate multi-phase Django project verification including code quality, migrations, tests, and security scans.

Community
Advanced
human-centric-engineeringhuman-centric-engineering

pr-gates

Runs pre-merge gate checks on a branch and fixes findings until all gates pass.

Official
Advanced
xtrm-devxtrm-dev
4

python-testing

Design pytest-based test suites with fixtures, parametrization, mocking, and coverage targets.

Official
Advanced
mk-knight23mk-knight23
1

code-reviewer

Run static analysis and AI review on Python code to produce a severity-rated CODE_REVIEW.md report.

Community
Advanced