Skip to content
Back to skills

Neo Python Manager

FSecurity

智慧偵測與管理 Python 專案的虛擬環境與依賴套件工具(支援 uv, Poetry, venv/pip),包含工具安裝導引。

  • 7 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added May 26, 2026
devopspythongoshell

Works with

  • cli

Security analysis

F9/100
  • criticalPipes output to a shell interpreter
  • mediumUses curl or wget to download content
  • criticalDownloads and executes remote scripts — classic supply chain attack
  • criticalDownloads and executes remote scripts — classic supply chain attack
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro shows the line behind each finding and how to fix it

Scanned May 27, 2026

npx -y skills add Benknightdark/neo-skills --skill neo-python-manager --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Neo Python Manager?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Neo Python Manager
[![Security: F — Skills Directory](https://www.skillsdirectory.com/api/skills/benknightdark-neo-python-manager/badge)](https://www.skillsdirectory.com/skills/benknightdark-neo-python-manager)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: neo-python-manager
version: "1.1.0"
category: "Environment"
description: "智慧偵測與管理 Python 專案的虛擬環境與依賴套件工具(支援 uv, Poetry, venv/pip),包含工具安裝導引。"
compatibility: "Supports any Python project containing pyproject.toml, requirements.txt, uv.lock, or poetry.lock."
---

# Python Environment Manager Skill

## Trigger On
- The user asks "How do I install a package?" or "Which package manager is this project using?".
- The user requests to add, remove, or update Python dependencies.
- Need to initialize a virtual environment or execute a Python script but unsure whether to use `uv run`, `poetry run`, or `python`.
- The project lacks explicit environment configuration and needs recommendations for suitable tools.

## Workflow
1. **Perceive:**
   - Scan the project root for characteristic files: `uv.lock`, `poetry.lock`, `pyproject.toml`, `requirements.txt`.
   - Check the system environment to test if tools are installed: execute `uv --version` or `poetry --version`.
2. **Reason:**
   - Determine the tool the project should use based on characteristic files (Priority: `uv` > `Poetry` > `pip`).
   - **Check tool availability**: If the project is determined to use `uv` but it's not installed, or if the user wants to switch to `uv/Poetry` but the environment is not ready, mark it as "Pending Installation".
3. **Act:**
   - **Tool Installation Suggestion**: If the tool is not installed, **must ask the user first**: "Detected that the project uses [Tool Name], but it is not installed in your environment. Would you like me to provide the installation command and assist with the installation?"
   - **Output Commands**: Provide the correct operation commands for the identified management tool.
   - **Execute Changes**: If the user agrees to installation or dependency changes, provide CLI commands for user confirmation.

## Tooling Commands Reference

### 1. uv (Recommended: Ultra-fast Tool)
- **Detection Criteria:** `uv.lock` exists.
- **Installation (Unix/macOS):** `curl -LsSf https://astral.sh/uv/install.sh | sh`
- **Installation (Windows):** `powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex"`
- **Common Commands:**
  - `uv add <package>` (Add package)
  - `uv sync` (Sync environment)
  - `uv run <script.py>` (Run script)

### 2. Poetry
- **Detection Criteria:** `poetry.lock` exists or `[tool.poetry]` in `pyproject.toml`.
- **Installation (Cross-platform):** `curl -sSL https://install.python-poetry.org | python3 -`
- **Common Commands:**
  - `poetry add <package>` (Add package)
  - `poetry install` (Install dependencies)
  - `poetry run python <script.py>` (Run script)

### 3. venv + pip (Legacy Standard)
- **Detection Criteria:** Only `requirements.txt` or `.venv` exists.
- **Common Commands:**
  - `pip install <package>`
  - `pip install -r requirements.txt`

## Deliver
- **Environment Detection Report:** Inform the current environment status (e.g., uv installed, poetry.lock detected).
- **Installation and Operation Guidance:** If tools are missing, proactively ask for installation consent and provide the correct syntax.
- **Environment Consistency Check:** Ensure provided commands perfectly match the project's existing lock files.

## Validate
- Never execute installation commands directly without asking the user.
- Installation commands must distinguish between operating systems (macOS/Linux vs Windows).

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.