python-foundational

作者: microsoft

Python基础最佳实践、惯用法及代码质量核心要点 - 由 microsoft/hve-core 提供

npx skills add https://github.com/microsoft/hve-core --skill python-foundational

Python Foundational Coding Standards Skill

Overview

Foundational Python excellence that every diff must satisfy. This skill is loaded first for any .py change. All higher-order skills build on it.

This content is a skill rather than an instructions file for three reasons: skills are distributed through the CLI plugin and VS Code extension without requiring consumers to copy files into their repo; new language skills can be added without modifying the review agent itself; and skills are loaded on demand, keeping the context window small when the diff contains no Python.

Core Checklist

1. Readability & Style

  • Use Python naming: PascalCase classes, snake_case functions/variables, UPPER_SNAKE_CASE constants, _ private members.
  • Group imports: stdlib → third-party → local (blank line between groups, no trailing whitespace).

2. Pythonic Idioms

  • Prefer comprehensions for simple transforms; use explicit loops for complex logic/side-effects.
  • Always use with for files, locks, DB connections.
  • Prefer dataclass / NamedTuple / Enum for data holders.
  • Use pathlib over os.path; timezone-aware datetime when relevant.
  • Use * keyword-only arguments for multi-optional functions.
  • Never use mutable defaults or global/nonlocal unless strictly required.

3. Function & Class Design

  • Keep functions small and single-responsibility.
  • Add docstrings to all public APIs (follow repo style).
  • Document unavoidable side-effects.
  • Follow codebase’s class-member ordering (if defined).

4. Type Safety Foundations

  • Add type hints to all public APIs, module vars, and class attributes.
  • Use PEP 695 (3.12+) or TypeVar for generics.
  • Avoid Any except in thin wrappers.

5. Error Handling

  • Raise specific exceptions; never bare except: (broad except Exception: only at app boundaries with logging).
  • No silent failures or generic error messages.
  • Provide context, expected state, and guidance in every exception.

6. Anti-Patterns to Avoid

  • Never use eval, exec, or pickle on untrusted data.
  • Never hard-code secrets.

7. Maintainability

  • Prefer self-documenting code; comments only for "why".
  • Use structured logging instead of print.
  • Flag overly long/complex functions that resist testing.

8. Architectural Fit

  • Align with existing patterns; do not re-implement shared functionality or bypass established layers.
  • Place code in the correct module/package.

9. Design Principles

  • Eliminate duplication: extract repeated logic into a shared helper so fixes propagate automatically.
  • Prefer the simplest implementation that satisfies current requirements. Introduce abstractions only when a second concrete use case appears.
  • Limit change breadth: every modified line should trace to the stated purpose of the change.
  • Before flagging seemingly unused code, verify it is not a protocol implementation, framework hook, public API, or entry point invoked externally.
  • Match solution complexity to problem complexity. A duplicated function warrants a shared helper, not an event-driven architecture.

References

FileCoversPurpose
design-principles.mdSection 9Rationale and examples for the design principles
code-style-patterns.mdSections 1–5Concrete code examples for style, idioms, type safety, class design, and error handling

Severity Rubric

SeverityDefinition
HighCauses incorrect behavior, data loss, or security exposure at runtime
MediumDegrades maintainability, readability, or violates a project convention with no immediate runtime impact
LowCosmetic, stylistic, or minor improvement opportunity

Troubleshooting

SymptomCheck
Skill not loadedConfirm the diff contains .py files. The agent selects skills by matching file types in the changed files against skill descriptions.
No findings generatedVerify the Skills Loaded footer in the review output lists python-foundational. If listed but no findings appear, the diff may already satisfy the checklist.
Severity seems miscalibratedCompare against the Severity Rubric above. High requires runtime impact; medium is maintainability-only.

Contributing

Follow these conventions when extending this skill:

  • Checklist items belong in SKILL.md. Each bullet is a single, actionable check an agent or reviewer can apply to a diff. Keep bullets concise: one sentence, no code.
  • Reference files live in references/ and provide examples or rationale for the covered checklist items. Each reference file covers a contiguous range of sections. Update the References table when adding a new file.
  • Before adding a new checklist item, confirm it does not duplicate an existing bullet in any section. Place it in the section that matches its primary concern. If it spans concerns, prefer the more specific section.
  • Name new reference files after the topic they cover (e.g., async-patterns.md). Include a frontmatter description that states which sections the file supports. Add a row to the References table in SKILL.md.
  • Checklist items and examples must be portable across codebases. Use generic module names and describe anti-patterns by their behavior, not by specific directory or file names.

来自 microsoft 的更多技能

oss-growth
microsoft
OSS增长黑客角色
agent-framework-azure-ai-py
microsoft
使用Microsoft Agent Framework Python SDK(agent-framework-azure-ai)构建Azure AI Foundry代理。在创建使用AzureAIAgentsProvider的持久化代理、使用托管工具(代码解释器、文件搜索、网络搜索)、集成MCP服务器、管理对话线程或实现流式响应时使用。涵盖函数工具、结构化输出和多工具代理。
development
airunway-aks-setup
microsoft
在AKS上设置AI Runway——从裸集群到运行模型。涵盖集群验证、控制器安装、GPU评估、提供商设置和首次部署。适用场景:“设置AI Runway”、“接入AKS集群”、“安装AI Runway”、“airunway设置”、“将模型部署到AKS”、“在AKS上进行GPU推理”、“在AKS上配置KAITO”、“在AKS上运行LLM”、“在AKS上使用vLLM”、“在AKS上设置模型服务”、“AI Runway控制器”。
devops
appinsights-instrumentation
microsoft
使用Azure Application Insights对Web应用进行插桩的指南。提供遥测模式、SDK设置和配置参考。适用场景:如何对应用进行插桩、App Insights SDK、遥测模式、什么是App Insights、Application Insights指南、插桩示例、APM最佳实践。
devops
applicationinsights-web-ts
microsoft
使用Application Insights JavaScript SDK(@microsoft/applicationinsights-web)为浏览器/Web应用添加检测。用于真实用户监控(RUM)——页面视图、点击、AJAX/fetch依赖项、异常、自定义事件,以及与后端OpenTelemetry追踪关联的浏览器端GenAI代理追踪。涵盖SDK加载器脚本和npm设置、框架扩展(React、React Native、Angular)、点击分析、遥测初始化器,以及从浏览器发出的代理/工具/模型跨度所遵循的OTel GenAI语义约定。
devops
azure-ai-anomalydetector-java
microsoft
使用适用于 Java 的 Azure AI 异常检测器 SDK 构建异常检测应用程序。在实现单变量/多变量异常检测、时间序列分析或 AI 驱动的监控时使用。
development
azure-ai-language-conversations-py
microsoft
使用azure-ai-language-conversations Python SDK实现对话语言理解(CLU)。当使用ConversationAnalysisClient分析对话意图和实体、构建NLP功能或将语言理解集成到应用程序中时使用。
development
azure-ai-ml-py
microsoft
Azure Machine Learning SDK v2 for Python。用于机器学习工作区、作业、模型、数据集、计算资源和管道。 触发词:“azure-ai-ml”、“MLClient”、“工作区”、“模型注册表”、“训练作业”、“数据集”。
development