agentleFS
vosslabvosslab/vosslab-skills/skills/quality/old-python-code-review/SKILL.md

old-python-code-review

Skill5 starsChanged 21 days agoMITView on GitHub

Single-pass Python correctness, security, and style review on demand; not for multi-reviewer audits before merge (use audit-code-reviewer for that).

The file

We split this skill into the rules it gives an agent

7 rules. About 0 are common, 5 are distinctive, and 2 are very specific to this project.

  • ≈0

    Common · estimate

    Many files like this have a rule of this kind.

  • ≈5

    Distinctive · estimate

    This author's own choices. Worth a look.

  • 2

    Very specific

    Tied to their project's names, files or tools. Probably skip.

  • Common
  • Distinctive
  • Very specific
  1. Very specific:

    If the repo has docs/active_plans/, identify the active plan document(s) that govern the change.

    line 15
  2. Distinctive:

    If an active plan exists, map code and tests to plan requirements, acceptance criteria, and stated constraints.

    line 17
  3. Distinctive:

    Test gaps and residual risk

    line 33
  4. Very specific:

    Prefer design-level fixes over symptom patches.

    line 37
  5. Distinctive:

    Prefer small, local edits that preserve behavior unless a bug requires behavior change.

    line 55
  6. Distinctive:

    Keep fixes aligned with repo Python style and test conventions.

    line 56
  7. Distinctive:

    Add or adjust tests for each behavior-changing fix.

    line 57

≈ “Common” is an estimate: at least 1 in 5 of the 350,495 skill files we read have a rule of the same kind, not the same words. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.

Keep what fits and drop the rest. Your version, ready for your agents.
Files
SKILL.md

Old Python Code Review

Workflow

  1. Apply repo-rules-reader to the requested repo rule files. For the default review baseline, read AGENTS.md, docs/REPO_STYLE.md, docs/PYTHON_STYLE.md, docs/PYTEST_STYLE.md when present, and docs/CHANGELOG.md.
  2. Extract the review-relevant rules, especially how to run Python, Python style, pytest style, repo workflow rules, and the latest changelog entry.
  3. Inspect changed files first (git diff, git status --short), then inspect related call sites.
  4. If the repo has docs/active_plans/, identify the active plan document(s) that govern the change. Otherwise, skip plan-conformance steps.
  5. If an active plan exists, map code and tests to plan requirements, acceptance criteria, and stated constraints. Otherwise, skip this step.
  6. Prioritize findings by severity: plan mismatch/regressions when applicable, correctness/safety, then maintainability.
  7. Provide concrete, minimal fixes with before/after examples when a fix is straightforward.
  8. Flag uncertainty explicitly and ask targeted review questions for unclear logic or contracts.

Review Output Contract

  • Report findings first, ordered by severity.
  • For each finding include:
    • Severity (P1 critical, P2 high, P3 medium, P4 low)
    • File path and line reference
    • Risk and likely impact
    • Recommended change
  • After findings, include:
    • Open questions
    • Test gaps and residual risk
    • Brief summary

What To Check

  • Prefer design-level fixes over symptom patches; cite docs/REPO_STYLE.md when flagging this.
  • Plan conformance: implementation and tests match active plan scope, ordering, and acceptance criteria.
  • Plan drift: behavior changed without corresponding plan/changelog updates, or plan claims complete while code is partial.
  • Correctness: edge cases, off-by-one logic, stale assumptions, API misuse, compatibility breaks.
  • Security: unsafe eval/exec, command injection, path traversal, deserialization hazards, and weak validation.
  • Maintainability: dead code, hidden coupling, unclear naming, duplicated logic, brittle tests.
  • Python style: tabs for indentation, import module names rather than imported symbols when practical, no relative imports, direct required-key access, minimal try/except, shebangs only on runnable scripts, and source source_me.sh && python ... command examples.
  • Pytest style: small deterministic tests, plain asserts, stable behavior-focused expectations, tmp_path for filesystem tests, and no assertions on dates, collection sizes, required key lists, hardcoded defaults, function names, or other fragile details.
  • Performance only when materially relevant.

Fix Guidance

  • Prefer small, local edits that preserve behavior unless a bug requires behavior change.
  • Keep fixes aligned with repo Python style and test conventions.
  • Add or adjust tests for each behavior-changing fix.

Download now (ZIP)

Does it work?

Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.

No reviews yet

People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.

  • It worked
  • Partly
  • It didn't
What did you use it for? e.g. Reviewing pull requests in a Rails app

Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.

Your trail

Files you open will collect here, so you can find them again.

Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.

Now do this for your own.

Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.