Skip to main content
skill Claude Code CX Codex Cursor GitHub Copilot

modern-python — Claude Code skill: uv, ruff, ty

Configures Python projects with a modern tooling stack: uv for dependency management, ruff for linting and formatting, ty for type checking. Use when starting new projects, writing scripts, or migrating from legacy tools.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓
npx skills add trailofbits/skills --skill modern-python -a claude-code
Open on GitHub

What modern-python does

The skill applies best practices based on the Trail of Bits cookiecutter template. It includes ready-made pyproject.toml configurations, project structure recommendations, and a reference table for switching from pip, Poetry, mypy, and black. Teaches you to use uv add for dependency management instead of manual edits, uv run for command execution without activating a virtual environment, and [dependency-groups] (PEP 735) to separate dev tools from production dependencies.

Includes security recommendations: shellcheck for shell scripts, detect-secrets for credential detection, pip-audit for dependency vulnerabilities. Provides migration examples: converting requirements.txt to pyproject.toml, replacing flake8+black+isort with ruff, mypy with ty. Handles both single-file scripts (PEP 723) and full packages.

What it helps with

  • bootstrap a new Python project with a modern tooling stack
  • migrate from pip and requirements.txt to uv
  • replace flake8, black, isort with ruff
  • switch from mypy to faster type checking with ty
  • set up pre-commit hooks using prek instead of slow pre-commit

Example prompts for the agent

  • Install the modern-python skill and create a new project with uv, ruff, and ty
  • Help me migrate this project from legacy tools to uv
  • Show me how to set up pyproject.toml correctly for Python 3.11+ with dev-dependency groups

How to install modern-python

1Skills CLI (Vercel)

npx skills add trailofbits/skills --skill modern-python -a claude-code

2Manually: put the files in place

~/.claude/skills/modern-python/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/modern-python/

From the same set35

The whole set →
semgrep trailofbits Runs a Semgrep static security audit on your codebase. It presents a plan for user confirmation and merges all findings into SARIF. Claude Code CX Codex Cursor +1 9,500installs differential-review trailofbits Reviews code changes for security issues using Git history and test coverage. Use it for commits, diffs, and pull requests that need a written review report. Claude Code CX Codex Cursor +1 8,800installs secure-workflow-guide trailofbits Guides smart contracts through Trail of Bits' 5-step security audit on check-in or before deployment. It runs static analysis, generates visual charts, and prepares fuzzing tests. Claude Code CX Codex Cursor +1 7,400installs sharp-edges trailofbits Audits API designs and configuration schemas for developer footguns. Flags dangerous defaults and fragile interfaces where the easiest path causes security vulnerabilities. Claude Code CX Codex Cursor +1 6,900installs agentic-actions-auditor trailofbits Inspects GitHub Actions workflows for prompt injection risks and insecure AI agent setups. Catches attacker inputs leaking into prompts via event contexts or environment variables. Claude Code CX Codex Cursor +1 6,700installs gh-cli trailofbits A skill that redirects GitHub requests from curl and fetch to authenticated gh CLI for repositories, pull requests, and issues. Use it for private repos and higher API limits. Claude Code CX Codex Cursor +1 6,600installs variant-analysis trailofbits Finds related occurrences of an already identified defect across a repository. Use it after a vulnerability or logic issue turns up and similar code needs checking. Claude Code CX Codex Cursor +1 6,400installs sarif-parsing trailofbits Processes existing SARIF reports from CodeQL, Semgrep, and other scanners. Use it to filter findings, remove duplicates, or prepare results for CI/CD. Claude Code CX Codex Cursor +1 5,900installs

Similar

use-modern-go JetBrains Checks Go code against current, version-specific idioms. Useful before writing, fixing, or refactoring project code. Claude Code CX Codex Cursor +1 2,600installs creating-oracle-to-postgres-master-migration-plan official github This skill scans a .NET solution, finds Oracle dependencies, and builds a PostgreSQL migration plan. Use it before coordinating a migration across several projects. GitHub Copilot 1,800installs jscpd kucherenko Detects duplicate code across 220+ languages and formats findings for AI agents. It flags exact copies, renamed blocks, and refactoring hotspots. Claude Code CX Codex Cursor +1 2,600installs scikit-learn K-Dense-AI A skill for Python machine learning tasks: classification, regression, clustering, preprocessing, and building ML pipelines with scikit-learn 1.9.1. Claude Code CX Codex Cursor +1 2,200installs n8n-code-python czlonkowski Teaches the agent to write native Python in n8n 2.x Code nodes: only _items and _item, no imports by default, no old _input/_json helpers. Claude Code CX Codex Cursor +1 4,800installs semantic-kernel official github This skill helps build and inspect Semantic Kernel applications using current documentation. Use it for projects involving plugins, function calling, or AI integrations. GitHub Copilot 1,700installs migrate-to-shoehorn Matt Pocock Replaces as type assertions in tests with helpers from @total-typescript/shoehorn. Use it when tests need partial objects or deliberately invalid data. Claude Code 475,388installs write-swift emilkowalski This skill guides Swift coding, reviews, and migrations using the language’s current practices. Use it to investigate concurrency errors, hangs, data races, or retain cycles. Claude Code CX Codex Cursor +1 117,500installs

Questions about modern-python

How do I install modern-python in Claude Code?

Run npx skills add trailofbits/skills --skill modern-python -a claude-code, then open ~/.claude/skills/modern-python/SKILL.md for reference.

What does modern-python do?

Provides configurations and practices for a modern Python stack: dependency management via uv, linting and formatting via ruff, type checking via ty. Includes migration examples from pip, Poetry, mypy, and other legacy tools.

Does it require a specific Python version?

The skill targets Python 3.11 and newer. Tools can work with older versions, but configuration will need adjustment.

See also

Project sponsors

Companies that keep this analytics open
Gold sponsor

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor