The Agent Skills Directory

[SAFE]: The skill serves as a tutorial and reference guide for Python developers. It does not contain any malicious instructions or hidden behaviors.
[COMMAND_EXECUTION]: The sample-cli/code_validator.py utility uses subprocess.run to call linting tools like ruff and mypy. The implementation uses argument lists rather than shell strings, which prevents shell injection, and the behavior is consistent with the tool's intended purpose.
[CREDENTIALS_UNSAFE]: All examples involving sensitive information (API keys, database passwords) correctly instruct the user to use environment variables or specialized types like Pydantic's SecretStr to prevent accidental exposure. Hardcoded keys in the documentation are explicitly marked as "negative examples" of what to avoid.
[EXTERNAL_DOWNLOADS]: Dependencies listed in the documentation and README.md are standard, well-known Python libraries (e.g., httpx, sqlalchemy, pytest) fetched from official registries.

mastering-python-skill