Borrowing it
Nothing to install: this file belongs to rios0rios0/guide. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/rios0rios0/guide/main/.github/workflows/generate-ai-rules/skills/scaffold-python-package/SKILL.mdgit clone --depth 1 https://github.com/rios0rios0/guideWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/rios0rios0/guide/scaffold-python-package)<a href="https://agentmods.dev/skills/rios0rios0/guide/scaffold-python-package"><img src="https://agentmods.dev/badge/skills/rios0rios0/guide/scaffold-python-package/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/rios0rios0/guide/scaffold-python-package"><img src="https://agentmods.dev/badge/skills/rios0rios0/guide/scaffold-python-package.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00055 | $0.01082 |
| Opus 5.5 | $0.00022 | $0.00433 |
| Sonnet 5.5 | $0.00011 | $0.00216 |
| Haiku 4.5 | $0.00006 | $0.00108 |
Grade A, and why
scaffold-python-package scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 166 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Scaffold a new Python package following PEP 621, PDM, Black/isort/Flake8, type hints, and Loguru logging.
For detailed Python conventions, refer to the Python rule. For testing patterns, refer to the Testing rule. For Makefile setup, refer to the CI/CD rule.
Directory Structure
<project>/
├── <package_name>/
│ ├── __init__.py
│ └── main.py
├── tests/
│ ├── __init__.py
│ └── test_main.py
├── examples/
│ └── example_usage.py
├── Dockerfile
├── pyproject.toml
└── README.md
Step-by-Step
1. Initialize with PDM
mkdir <project> && cd <project>
pdm init
2. Configure pyproject.toml (PEP 621)
[project]
name = "package-name"
version = "0.1.0"
description = "Brief description of the package"
readme = "README.md"
requires-python = ">=3.10"
license = {text = "MIT"}
authors = [
{name = "Author Name", email = "[email protected]"},
]
dependencies = []
[project.optional-dependencies]
dev = [
"black",
"isort",
"flake8",
"pytest",
"loguru",
]
[build-system]
requires = ["pdm-backend"]
build-backend = "pdm.backend"
[tool.black]
line-length = 120
[tool.isort]
profile = "black"
line_length = 120
[tool.flake8]
max-line-length = 120
3. Create the package module
# <package_name>/__init__.py
"""Package description."""
__version__ = "0.1.0"
# <package_name>/main.py
from loguru import logger
def main() -> None:
"""Entry point for the package."""
logger.info("Starting application")
4. Add type hints everywhere
All functions must have type hints on parameters and return types:
def process_data(input_data: list[str], max_items: int = 10) -> dict[str, int]:
"""Process the input data and return counts."""
result: dict[str, int] = {}
for item in input_data[:max_items]:
result[item] = result.get(item, 0) + 1
return result
5. Set up logging with Loguru
Always use Loguru -- NEVER use the standard logging module or print():
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 166 lines · 55 tokens per session scan A 0de39779b0c6
scaffold-python-package is a skill published in the GitHub repository rios0rios0/guide (4 stars, last pushed yesterday), licensed MIT. It adds 55 tokens to every session and 1,082 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
django-patterns
Django architecture patterns, REST API design with DRF, ORM best practices, caching, signals, middleware, and production-grade Django apps.
accelerate
Run PyTorch training across GPUs with minimal changes.
python-patterns
Python-specific design patterns and best practices including protocols, dataclasses, context managers, decorators, async/await, type hints, and package organization. Use when working with Python code to apply Pythonic patterns.
python-testing
Python testing best practices using pytest including fixtures, parametrization, mocking, coverage analysis, async testing, and test organization. Use when writing or improving Python tests.
pytorch-patterns
PyTorch deep learning patterns and best practices for building robust, efficient, and reproducible training pipelines, model architectures, and data loading.
fastapi-patterns
FastAPI patterns for async APIs, dependency injection, Pydantic request and response models, OpenAPI docs, tests, security, and production readiness.