Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add priyanshuchawda/codeaudit --skill python-mcp-server-qualitygit clone --depth 1 https://github.com/priyanshuchawda/codeauditWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/priyanshuchawda/codeaudit/python-mcp-server-quality)<a href="https://agentmods.dev/skills/priyanshuchawda/codeaudit/python-mcp-server-quality"><img src="https://agentmods.dev/badge/skills/priyanshuchawda/codeaudit/python-mcp-server-quality/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/priyanshuchawda/codeaudit/python-mcp-server-quality"><img src="https://agentmods.dev/badge/skills/priyanshuchawda/codeaudit/python-mcp-server-quality.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00045 | $0.00439 |
| Opus 5.5 | $0.00018 | $0.00176 |
| Sonnet 5.5 | $0.00009 | $0.00088 |
| Haiku 4.5 | $0.00005 | $0.00044 |
Grade A, and why
python-mcp-server-quality scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Python MCP Server Quality
Core Standard
Python MCP servers should be small, typed, read/write behavior should be explicit, and stdio output must remain protocol-safe.
Required Checks
- Server shape: use
FastMCPfrom the official Python MCP SDK unless the project has a clear reason not to. - Tools: one tool equals one capability; every tool has type hints, docstring, validation, bounded filesystem/network behavior, and structured return data.
- Resources: expose read-only docs, config, indexes, or templates as resources instead of action tools.
- Prompts: keep reusable instructions parameterized and do not embed secrets or hidden authority.
- Transport: use stdio for local clients and streamable HTTP behind HTTPS/auth for remote clients.
- Stdio safety: never print logs to stdout; use stderr or MCP context logging.
- Errors: return useful, redacted errors; do not leak stack traces, tokens, env values, paths outside the selected project, or provider internals.
- Testing: cover tool functions directly, then verify with MCP Inspector or an in-memory/client smoke test.
- Packaging: prefer
uv,pyproject.toml, pinned Python version, and documenteduv runcommands.
Generation Workflow
For new Python MCP servers, combine this skill with python-mcp-server-generator and mcp-builder. Start with a minimal working server, add tests before expanding tools, then document client setup for Codex, Claude Code, Cursor, VS Code, and MCP Inspector.
Common Mistakes
- Returning broad dictionaries without stable keys or documented schema.
- Using one generic
run_commandormanage_projecttool instead of focused tools. - Letting tools read arbitrary paths without resolving them under an allowed project root.
- Adding write, delete, push, deploy, or merge operations before an explicit approval model exists.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 36 lines · 45 tokens per session scan A f35b627589bb
python-mcp-server-quality is a skill published in the GitHub repository priyanshuchawda/codeaudit (1 stars, last pushed 5mo ago), licensed MIT. It adds 45 tokens to every session and 439 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
fastapi-templates
Create production-ready FastAPI projects with async patterns, dependency injection, and comprehensive error handling. Use when building new FastAPI applications or setting up backend API projects.
telnyx-numbers-python
Search, order, and manage phone numbers by location, features, and coverage.
telnyx-ai-outbound-voice-python
End-to-end setup for making a Telnyx AI assistant call a phone number. Covers provisioning a phone number, creating a TeXML application, assigning the number, configuring telephony settings, whitelisting destination countries, and triggering outbound calls via scheduled events. Use this skill (not…
fastapi-async-microservices
Design and develop production-grade asynchronous microservices using FastAPI, Python 3.12+, Pydantic v2 Settings and Schemas, SQLAlchemy 2.0 async sessions, dependency injection, lifespan state management, structured JSON logging, and connection pooling. Trigger when building async Python APIs, microservices, or…
django
Expert Django assistance covering ORM, models, class-based views, admin interface, migrations, and Django REST Framework. Use when developing robust, scalable Python web applications and REST APIs.
fastapi
Expert FastAPI assistance covering Pydantic models, async endpoints, dependency injection, and OpenAPI generation. Use when developing high-performance Python REST APIs and microservices.