How do I install the Reviewing Python Libraries skill?

Run npx skillmds@latest add tomevault-io/reviewing-python-libraries in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Reviewing Python Libraries safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Reviewing Python Libraries?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Reviewing Python Libraries free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Reviewing Python Libraries?

tomevault-io (@tomevault-io) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Reviewing Python Libraries by tomevault-io

Name: Reviewing Python Libraries
Author: tomevault-io

Reviewing Python Libraries

Comprehensively reviews Python libraries for quality across project structure, packaging, code quality, testing, security, documentation, API design, and CI/CD. Provides actionable feedback and improvement recommendations. Use when evaluating library health, preparing for major releases, or auditing dependencies. Use when this capability is needed.

tomevault-io d520138 2 files · 3.7 KB Updated Sep 17, 2026

File contents

Python Library Review

Quick Health Check (5 min)

git clone https://github.com/user/package && cd package
cat pyproject.toml | head -50        # Modern config?
ls tests/ && pytest --collect-only   # Tests exist?
pytest --cov=package | tail -20      # Coverage?
pip install bandit && bandit -r src/ # Security?

Review Dimensions

Area	Check For
Structure	src/ layout, py.typed marker
Packaging	pyproject.toml (not setup.py)
Code	Type hints, docstrings, no anti-patterns
Tests	80%+ coverage, edge cases
Security	No secrets, input validation, pip-audit clean
Docs	README, API docs, changelog
API	Consistent naming, sensible defaults
CI/CD	Tests on PR, multi-Python, security scans

Red Flags 🚩

No tests
No type hints
setup.py only (no pyproject.toml)
Pinned exact versions for all deps
No LICENSE file
Last commit > 1 year ago

Green Flags ✅

Active maintenance (recent commits)
High test coverage (>85%)
Comprehensive CI/CD
Type hints throughout
Clear documentation
Semantic versioning

Report Template

# Library Review: [package]

**Rating:** [Excellent/Good/Needs Work/Significant Issues]

## Strengths
- [Strength 1]

## Areas for Improvement
- [Issue 1] - Severity: High/Medium/Low

## Category Scores
| Category | Score |
|----------|-------|
| Structure | ⭐⭐⭐⭐⭐ |
| Testing | ⭐⭐⭐☆☆ |
| Security | ⭐⭐⭐⭐☆ |

## Recommendations
1. [High priority action]
2. [Medium priority action]

For detailed checklists, see:

CHECKLIST.md - Full review checklist
REPORT_TEMPLATE.md - Complete report template

Best Practices Checklist

Essential:
- [ ] pyproject.toml valid
- [ ] Tests exist and pass
- [ ] README has install/usage
- [ ] LICENSE present
- [ ] No hardcoded secrets

Important:
- [ ] Type hints on public API
- [ ] CI runs tests on PRs
- [ ] Coverage > 70%
- [ ] Changelog maintained

Recommended:
- [ ] src/ layout
- [ ] py.typed marker
- [ ] Security scanning in CI
- [ ] Contributing guide

Learn More

This skill is based on the Guide to Developing High-Quality Python Libraries by Will McGinnis. The review criteria in this skill draw from all posts in the guide — see the full guide for detailed quality criteria across every dimension of library development.

Converted and distributed by TomeVault — claim your Tome and manage your conversions.

---name: reviewing-python-librariesdescription: Comprehensively reviews Python libraries for quality across project structure, packaging, code quality, testing, security, documentation, API design, and CI/CD. Provides actionable feedback and improvement recommendations. Use when evaluating library health, preparing for major releases, or auditing dependencies. Use when this capability is needed.---# Python Library Review## Quick Health Check (5 min)```bashgit clone https://github.com/user/package && cd packagecat pyproject.toml | head -50 # Modern config?ls tests/ && pytest --collect-only # Tests exist?pytest --cov=package | tail -20 # Coverage?pip install bandit && bandit -r src/ # Security?```## Review Dimensions| Area | Check For ||------|-----------|| Structure | src/ layout, py.typed marker || Packaging | pyproject.toml (not setup.py) || Code | Type hints, docstrings, no anti-patterns || Tests | 80%+ coverage, edge cases || Security | No secrets, input validation, pip-audit clean || Docs | README, API docs, changelog || API | Consistent naming, sensible defaults || CI/CD | Tests on PR, multi-Python, security scans |## Red Flags 🚩- No tests- No type hints- setup.py only (no pyproject.toml)- Pinned exact versions for all deps- No LICENSE file- Last commit > 1 year ago## Green Flags ✅- Active maintenance (recent commits)- High test coverage (>85%)- Comprehensive CI/CD- Type hints throughout- Clear documentation- Semantic versioning## Report Template```markdown# Library Review: [package]**Rating:** [Excellent/Good/Needs Work/Significant Issues]## Strengths- [Strength 1]## Areas for Improvement- [Issue 1] - Severity: High/Medium/Low## Category Scores| Category | Score ||----------|-------|| Structure | ⭐⭐⭐⭐⭐ || Testing | ⭐⭐⭐☆☆ || Security | ⭐⭐⭐⭐☆ |## Recommendations1. [High priority action]2. [Medium priority action]```For detailed checklists, see:- **[CHECKLIST.md](CHECKLIST.md)** - Full review checklist- **[REPORT_TEMPLATE.md](REPORT_TEMPLATE.md)** - Complete report template## Best Practices Checklist```Essential:- [ ] pyproject.toml valid- [ ] Tests exist and pass- [ ] README has install/usage- [ ] LICENSE present- [ ] No hardcoded secretsImportant:- [ ] Type hints on public API- [ ] CI runs tests on PRs- [ ] Coverage > 70%- [ ] Changelog maintainedRecommended:- [ ] src/ layout- [ ] py.typed marker- [ ] Security scanning in CI- [ ] Contributing guide```## Learn MoreThis skill is based on the [Guide to Developing High-Quality Python Libraries](https://mcginniscommawill.com/guides/python-library-development/) by [Will McGinnis](https://mcginniscommawill.com/). The review criteria in this skill draw from all posts in the guide — see the [full guide](https://mcginniscommawill.com/guides/python-library-development/) for detailed quality criteria across every dimension of library development.---> Converted and distributed by [TomeVault](https://tomevault.io/claim/wdm0006) — claim your Tome and manage your conversions.

Frequently asked questions