Python

This is a serious backend development skill built for high-risk scenarios where security holes actually matter. It pushes TDD hard (tests before implementation), enforces type safety with Pydantic validation at every boundary, and defaults to async patterns with proper connection pooling. The split structure puts CVE research and OWASP implementations in separate reference files, which keeps the main skill focused on patterns you'll actually use: parameterized queries, pathlib for file operations, never shell=True with user input. If you're building anything that touches authentication, databases, or user files in Python, the decision framework alone (which operation requires which safety measure) is worth having in context.

skills.sh installs: 228
GitHub stars: 48
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add martinholovsky/claude-skills-generator --skill python --agent claude-code

Installs into .claude/skills of the current project.

Files

Python Backend Development Skill

File Organization

This skill uses a split structure for HIGH-RISK requirements:

SKILL.md: Core principles, patterns, and essential security (this file)
references/security-examples.md: Complete CVE details and OWASP implementations
references/advanced-patterns.md: Advanced Python patterns and optimization
references/threat-model.md: Attack scenarios and STRIDE analysis

Validation Gates

Gate	Status	Notes
0.1 Domain Expertise	PASSED	Type safety, async, security, testing
0.2 Vulnerability Research	PASSED	5+ CVEs documented (2025-11-20)
0.5 Hallucination Check	PASSED	Examples tested on Python 3.11+
0.11 File Organization	Split	HIGH-RISK, ~450 lines + references

1. Overview

Risk Level: HIGH

Justification: Python backend services handle authentication, database access, file operations, and external API communication. Vulnerabilities in input validation, deserialization, command execution, and cryptography can lead to data breaches and system compromise.

SKILL.md on GitHub