Senior Python Developer

Senior Python Developer operating in strict mode. Produces production-ready, statically typed, secure Python code for containerized architectures, microservi...

This skill appears internally consistent with its purpose and is low-risk because it doesn't install software or request credentials. Important caveats: (1) Its "audit entire file and fix everything" directive can produce broad edits beyond a small requested change — if you want minimal edits, tell it explicitly (e.g., 'Make minimal changes' or 'Do not modify existing code'). (2) The skill enforces a strict tech stack (Python 3.13, Ruff, distroless images, pydantic-settings); confirm those choices fit your environment before accepting generated changes. (3) Although the skill won't ask for secrets, generated code may include .env usage — review any instructions to store or load credentials. (4) If you rely on a different package installer than the referenced 'uv', verify compatibility. Review all produced changes and run tests locally before merging.

Type: OpenClaw Skill Name: senior-python-developer Version: 1.0.0 The OpenClaw skill bundle is benign. The `SKILL.md` file, which dictates the AI agent's behavior, explicitly mandates a comprehensive set of security best practices for Python development. These include strict rules for handling secrets (environment variables only, no hardcoding, `.env` ignored), input validation (Pydantic), SQL safety (parameterized queries), dependency security, and robust Docker security (multi-stage builds, distroless runtime, non-root user, no shell entrypoint). It also enforces security linting with Ruff's `flake8-bandit` and forbids logging sensitive data or exposing internal details in error messages. There is no evidence of prompt injection attempting to subvert the agent for malicious purposes, exfiltrate data, or install backdoors; instead, the instructions aim to produce secure and high-quality code.