python-review

Reviews Python code for typing, async, agent-loop, and ML reproducibility issues.

3|Updated Jul 2, 2026
One-click install
npx skills add https://github.com/ArangoGutierrez/claude-toolkit --skill python-review-arangogutierrez
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: python-review
Source: https://github.com/ArangoGutierrez/claude-toolkit/tree/main/.claude/skills/python-review
Command: npx skills add https://github.com/ArangoGutierrez/claude-toolkit --skill python-review-arangogutierrez

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Python code in AI/MLOps and agent codebases has sharp edges that formatters and linters miss: async bugs that stall event loops, agent loops without iteration or budget bounds, unsafe model deserialization, and silent reproducibility failures. This Skill runs a systematic review that catches these correctness, security, and reproducibility issues before human review. ## Core Features & Use Cases - Static analysis integration: Runs pyright (or mypy) and ruff check on changed files, but only when the project already configures them — it never installs tools into the project. - Domain-specific checklist: Walks a structured checklist covering core correctness and typing, async correctness, agent-building invariants (iteration bounds, tool-argument validation, prompt-injection surface), ML reproducibility and serialization safety (torch.load, pickle, seeds), and packaging hygiene. - Structured findings: Reports each issue as file:line with a category (correctness/security/reproducibility/performance), severity (must-fix/should-fix/consider), and a suggested fix. - Use Case: Before opening a PR on an LLM agent codebase, say "review this agent code" to catch missing await calls, unbounded tool-use loops, eval/exec on model output, and torch.load without weights_only=True. ## Quick Start Ask the assistant to review the changed Python files in this project for typing, async, agent-loop, and reproducibility issues.

Frequently Asked Questions about python-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review Python agent code for safety issues?▼

Invoke the review on your changed files and it checks agent-loop invariants: iteration and budget bounds, tool-argument validation against schemas, strict output parsing without eval/exec, and treating tool output as untrusted data. Each finding includes file:line, severity, and a suggested fix.

What static analysis tools does Python code review use?▼

It runs pyright or mypy for typing and ruff check for lint, but only when the project already configures them in pyproject.toml, mypy.ini, or setup.cfg. It never installs tools into the project and skips straight to the checklist if none are configured.

Does this review catch async bugs in Python?▼

Yes, the checklist covers blocking calls inside async def, forgotten await, asyncio.gather without return_exceptions, fire-and-forget tasks without references, cancellation handling, and event-loop-per-thread confusion. These are flagged with concrete file:line locations.

Can it detect unsafe torch.load or pickle usage?▼

Yes, torch.load without weights_only=True on untrusted artifacts and pickle.load of untrusted data are flagged as must-fix security issues. The recommended fix is weights_only=True or safetensors for weights, and non-executing formats like JSON or parquet for data.

When should I not use this Python review?▼

Skip it for style and formatting concerns, which black and ruff already handle and the review explicitly ignores. It also avoids demanding type annotations on private helpers in untyped codebases and does not redesign architecture.