python-reviewer

Review modified Python files for security, reliability, and style issues.

Updated Apr 16, 2026
One-click install
npx skills add https://github.com/jjmendezrodriguez/jm-claude-plugin --skill python-reviewer-jjmendezrodriguez
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: python-reviewer
Source: https://github.com/jjmendezrodriguez/jm-claude-plugin/tree/main/skills/python-review
Command: npx skills add https://github.com/jjmendezrodriguez/jm-claude-plugin --skill python-reviewer-jjmendezrodriguez

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you review Python changes so they meet PEP 8 standards, follow Pythonic idioms, include solid type hints, and avoid common security and performance pitfalls before they reach production.

Core Features & Use Cases

  • Security-focused reviews: flags critical issues like SQL/command injection, path traversal, unsafe eval/exec, unsafe deserialization, and hardcoded secrets.
  • Error handling improvements: prevents silent failures by detecting bare except, swallowed exceptions, and missing context managers.
  • Maintainable, Pythonic code quality: enforces type hints for public APIs, discourages mutable defaults, catches deep nesting/large functions, and promotes clear constants.
  • Performance and concurrency checks: identifies N+1 query risks, improper sync/async mixing, and unsafe shared state without locks.
  • Use case: review a pull request that introduces new .py files with database queries and request handlers, ensuring safe parameterization, correct exception handling, and clean typed interfaces.

Quick Start

Run the python-reviewer skill to review your recent Python changes by diffing modified .py files and prioritizing security and error-handling fixes first.

Frequently Asked Questions about python-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review Python code for security issues before merging?

Reviewing Python code for security issues involves diffing modified .py files to identify SQL injection, path traversal, unsafe eval/exec, and hardcoded secrets before merging. This process flags critical risks early, ensuring only safe parameterization and secure handling reach production.

What is the best way to enforce PEP 8 and type hints in a pull request?

Enforcing PEP 8 and type hints in a pull request requires automated checks on modified Python source files. This enforces Pythonic conventions, discourages mutable defaults, and validates type hints for public APIs, ensuring maintainable code quality before changes are merged.

How do I detect silent failures and bare except clauses in Python scripts?

Detecting silent failures and bare except clauses in Python scripts requires static analysis of modified source files. This identifies swallowed exceptions and missing context managers, preventing silent failures by enforcing proper error handling before merging.

Can I check Python backend services for N+1 query risks and improper async mixing?

You can check Python backend services for N+1 query risks and improper async mixing by reviewing modified source files. This identifies improper sync/async mixing and unsafe shared state without locks, ensuring performance and concurrency reliability before merging.

Does Python code review work on diff-based change detection for ongoing development?

Python code review works on diff-based change detection for ongoing development by analyzing modified .py files. This applies to pull requests and ongoing development, producing prioritized review outputs that block critical or high-risk issues before merging.