mtk-agent-toolkit: Skill for Claude Code

Tech Stack: Python

Overview

Python context for the workflow skills and review agents: commands, detection markers, the data-layer rules that bite, settings and scan recipes. Generic FastAPI/Django/SQLAlchemy practice is assumed, not restated.

When To Use

Loaded automatically when the active tech stack is python; never invoked directly.

Build & Test Commands

No compile step: type checking and tests are the verification gates.

• Type check (compile-equivalent): mypy . or pyright (whichever the project uses)
• Test (batch): pytest -q --tb=short <path/to/module> or pytest -q --tb=short -k <pattern>
• Test (full): pytest -q --tb=short
• Bounded output is the default. Batch checkpoints run these through bash scripts/mtk-verify-run.sh --label <batch-id>-<step> -- <cmd> — the wrapper's bounded tail is the evidence, the log path is the receipt.
• Format: see ## Format Command.
• Lint: ruff check <path> (or flake8 / pylint per project)

Prefer project targets when present: tox, poetry run pytest, make test, just test.

File Extensions & Markers

How setup-bootstrap detects this stack in a repository:

Marker	Confidence
pyproject.toml	High
setup.py or setup.cfg	High
requirements.txt	Medium
Pipfile or poetry.lock	High
.python-version	Low (supplemental)

Detection command:

find . -maxdepth 2 \( -name "pyproject.toml" -o -name "setup.py" -o -name "requirements.txt" -o -name "Pipfile" \) 2>/dev/null | head -3

ORM & Data Layer Guidance

• SQLite in-memory does not validate Postgres behavior (JSONB, arrays, ILIKE, full-text search, advisory locks). Use testcontainers-python or a real test database when database semantics matter; for Django, pytest-django against Postgres.
• A sync DB driver (or requests) inside an async def endpoint blocks the event loop. Use a sync endpoint over a sync driver; do not fake async.
• Review Alembic autogenerated migrations before applying: it guesses, and reads a rename as drop + add.
• Writes run inside an explicit transaction (with session.begin():, transaction.atomic()), one commit per request or handler; audited writes follow domain-finance.md.