modern-python

name	modern-python
description	Modern Python tooling best practices using uv, ruff, ty, and pytest. Mandates the Trail of Bits Python coding standards for project setup, dependency management, linting, type checking, and testing. Based on patterns from trailofbits/cookiecutter-python.
version	1.0.0
model	sonnet
invoked_by	both
user_invocable	true
tools	["Read","Write","Bash","Glob","Grep"]
args	[--init] [--migrate] [--check] [--fix]
best_practices	["Always use uv for dependency management instead of pip/Poetry/pipenv","Use ruff for both linting and formatting instead of separate tools","Use ty for type checking instead of mypy (faster, Rust-based)","Structure tests with pytest and use hypothesis for property-based testing","Configure all tools in pyproject.toml, never in separate config files"]
error_handling	graceful
streaming	supported
verified	false
lastVerifiedAt	null

Modern Python Skill

Modern Python tooling skill adapted from Trail of Bits coding standards. Mandates the use of uv (package management), ruff (linting and formatting), ty (type checking), and pytest (testing) as the standard Python toolchain. Based on patterns from trailofbits/cookiecutter-python for consistent, high-quality Python projects. - Project initialization with modern Python toolchain (uv + ruff + ty + pytest) - Migration from legacy tools (pip/Poetry/pipenv to uv, black/flake8/isort to ruff, mypy to ty) - pyproject.toml configuration for all tools (single source of truth) - Dependency management with uv (lock files, dependency groups, virtual environments) - Linting and formatting with ruff (replaces flake8, isort, black, pyflakes, pycodestyle) - Type checking with ty (Rust-based, faster than mypy) - Testing with pytest, pytest-cov, and hypothesis - CI/CD configuration with GitHub Actions - Dependabot setup for automated dependency updates - Pre-commit hook configuration

Overview

This skill implements Trail of Bits' modern Python coding standards for the agent-studio framework. The core philosophy is: use Rust-based tools for faster feedback loops, especially when working with AI agents. Every tool in this stack (uv, ruff, ty) is written in Rust and provides sub-second execution times, enabling tight iteration cycles.

Source repository: https://github.com/trailofbits/skills Template: https://github.com/trailofbits/cookiecutter-python License: CC-BY-SA-4.0

When to Use

• When creating new Python projects from scratch
• When migrating Python projects from legacy tooling
• When setting up CI/CD pipelines for Python projects
• When standardizing Python tooling across a team
• When writing standalone Python scripts that need proper structure
• When an AI agent needs fast feedback from Python tooling

Iron Law

ALL PYTHON TOOLING CONFIGURED IN pyproject.toml — NO SEPARATE CONFIG FILES

pyproject.toml is the single source of truth for all tool configuration. No setup.cfg, no .flake8, no mypy.ini, no black.toml.

The Modern Python Stack

Tool	Replaces	Purpose	Speed
uv	pip, Poetry, pipenv, pip-tools	Package & project management	10-100x faster