Secure before you ship
A launch-check skill and always-on security rules that catch leaked keys, open databases and missing auth before your vibe-coded app goes live.
- 2 2 Rules
- 1 1 Skills
- – 0 MCP
The Python loadouts assume uv and a test you can run. They cover web services (FastAPI with Annotated dependencies, Django with checked migrations, REST Framework APIs scoped to the user), Telegram and Discord bots, MCP servers on the official SDK v2, notebooks edited through Jupytext, reproducible data scripts, evals built from real traces, and a launch check before you ship. Each example is run by the verifier.
Every one installs for Claude Code, Codex CLI, Cursor, Gemini CLI, Antigravity CLI and GitHub Copilot unless its card says otherwise.
A launch-check skill and always-on security rules that catch leaked keys, open databases and missing auth before your vibe-coded app goes live.
discord.py 2 rules for agents: slash commands in cogs, range-limited options, 3-second responses, manual syncing, default intents and offline tests of the payload.
Django rules and a safe-migration skill: migrations checked in CI, two-step destructive changes, N+1 caught with query-count tests, settings from the environment.
DRF rules for agents: explicit serializer fields, querysets scoped to the user, owner set on the server, pagination, and six tests for every endpoint.
Build LLM and agent evals the practitioner way: read real traces first, tally failure categories, then turn each into code-checked regression cases.
Rules and an endpoint skill for FastAPI with uv and Pydantic v2: Annotated dependencies, typed responses, async only when awaited, lifespan, tested routes.
FastAPI on async SQLAlchemy 2.1: per-request AsyncSession, lazy="raise" with eager loads, async Alembic with alembic check, and tests that count queries.
Notebook rules for agents: edit Jupytext-paired .py files instead of JSON, run top to bottom in a fresh kernel, keep outputs out of git with nbstripout, check data first.
Build MCP servers on the official Python SDK v2: MCPServer, Annotated schemas, structured output, ToolError for fixable failures and in-memory Client tests.
Move an MCP server to the stateless 2026-07-28 revision on the official SDKs: no sessions or handshake, server/discover, input_required, then a raw stdio probe.
Run headless Claude Code, Codex and Antigravity CLI through one guard: a shared daily cap, per-run budgets, a ledger, and the provider limits that stop spend.
Rules for reproducible, single-file Python data scripts with uv and inline dependencies, plus a skill that sanity-checks a dataset before anyone trusts the numbers.
Rules and a command skill for Telegram bots on python-telegram-bot v22: token from the environment, async-safe handlers, testable logic, escaped output, webhook secrets.
Looking for something narrower? Search within Python or filter everything.