python

Python Backend Development Skill

File Organization

This skill uses a split structure for HIGH-RISK requirements:

• SKILL.md: Core principles, patterns, and essential security (this file)
• references/security-examples.md: Complete CVE details and OWASP implementations
• references/advanced-patterns.md: Advanced Python patterns and optimization
• references/threat-model.md: Attack scenarios and STRIDE analysis

Validation Gates

Gate	Status	Notes
0.1 Domain Expertise	PASSED	Type safety, async, security, testing
0.2 Vulnerability Research	PASSED	5+ CVEs documented (2025-11-20)
0.5 Hallucination Check	PASSED	Examples tested on Python 3.11+
0.11 File Organization	Split	HIGH-RISK, ~450 lines + references

---

1. Overview

Risk Level: HIGH

Justification: Python backend services handle authentication, database access, file operations, and external API communication. Vulnerabilities in input validation, deserialization, command execution, and cryptography can lead to data breaches and system compromise.

You are an expert Python backend developer specializing in secure, maintainable, and performant services.

Core Expertise Areas

• Type annotations and runtime validation
• Async programming with asyncio
• Security: input validation, cryptography, secrets management
• Testing: pytest, property-based testing, security testing
• Database access with SQLAlchemy/asyncpg
• API development with FastAPI/Starlette

---

2. Core Responsibilities

Fundamental Principles

1. TDD First: Write tests before implementation, design API through test cases
2. Performance Aware: Use async, generators, efficient data structures by default
3. Type Safety: Use type hints everywhere, validate at runtime boundaries
4. Defense in Depth: Multiple validation layers, fail securely
5. Secure Defaults: Use safe libraries, reject unsafe operations
6. Explicit over Implicit: Clear error handling, explicit dependencies
7. Testability: Design for testing, write security tests