Skip to content
Back to skills

Python Sdk

ASecurity

"Guide work on the Strands Python SDK: agent loop, tools, models,

  • 247 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added September 9, 2026
testingtypescriptpythongonodeawstestingapibackend

Works with

  • cli
  • api
  • mcp

Security analysis

A100/100

Pro scans all 7 files and shows the line behind each finding

Scanned September 9, 2026

npx -y skills add VectorSpaceLab/AREX-Skill --skill python-sdk --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Python Sdk?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Python Sdk
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/vectorspacelab-python-sdk-de0d59b5/badge)](https://www.skillsdirectory.com/skills/vectorspacelab-python-sdk-de0d59b5)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: python-sdk
description: "Guide work on the Strands Python SDK: agent loop, tools, models,
  MCP, memory, sessions, hooks, interventions, plugins, sandbox, telemetry,
  multi-agent graphs, snapshots, checkpoints, and Python tests."
disable-model-invocation: true
metadata:
  disco-role: operating
license: Apache 2.0
---

# Python SDK

Use this sub-skill for Strands Python SDK work in the `strands-agents` package
and its Python source tree.

## Start here

1. Read [overview.md](references/overview.md) to confirm scope, package identity, and exclusions.
2. Read [api-reference.md](references/api-reference.md) for verified signatures, exports, extras, and provider surfaces.
3. Read [workflows.md](references/workflows.md) for the smallest safe path for the task.
4. Read [testing-and-maintenance.md](references/testing-and-maintenance.md) before changing code or tests.
5. Read [troubleshooting.md](references/troubleshooting.md) when the task is about recovery or diagnosis.
6. Run [python-core-check.sh](scripts/python-core-check.sh) for import and signature sanity; add `--pytest` only in a Strands Agents checkout with test dependencies installed.

## Use this sub-skill for

- `Agent`, invocation, event loop, concurrency, limits, structured output, checkpoints, snapshots, and direct tool calls.
- `@tool`, tool schemas, `ToolContext`, tool loading, tool providers, executors, and MCP client integration.
- Model providers, model config validation, streaming, token counting, context-window behavior, and provider error translation.
- Conversation managers, context manager strategies, memory manager, sessions, storage, hooks, interventions, plugins, sandbox, and telemetry.
- Multi-agent graph, swarm, A2A, shared result/state objects, and multi-agent hook/plugin behavior.
- Python unit tests, focused integration-test selection, package extras, and Python-specific coding conventions.

## Route elsewhere

- TypeScript SDK implementation or Node/browser package checks: use [typescript-sdk](../typescript-sdk/SKILL.md).
- Docs-site authoring, snippets, `sourceLinks`, generated API docs, or navigation: use [docs-site](../docs-site/SKILL.md).
- The docs-search MCP server package and its `search_docs` / `fetch_doc` tools: use [mcp-server](../mcp-server/SKILL.md).
- AWS test-infra or live provider credentials: treat as optional and credential-bound unless explicitly requested.

## Operating rules

- Prefer verified signatures and package metadata from the bundled references over memory.
- Public package surfaces should be declared through `__all__`; heavy optional providers should remain lazy-loaded.
- Use precise types, `X | None` optionals, coded `# type: ignore[code]`, Google-style docstrings, and specific exceptions.
- Provider boundaries translate vendor context-window and throttling errors to typed SDK exceptions and chain the original cause.
- Hook events use shared names and before/after ordering; compare sibling TypeScript behavior before changing cross-SDK event names.
- Keep provider credentials, network services, AWS resources, and optional backend extras explicit in the verification handoff.

## Fast path

1. Identify the owning subsystem and read the closest reference section.
2. Inspect the target file and smallest behavior test for line-level confirmation; do not widen to unrelated provider or integration surfaces.
3. Run the import/signature smoke helper first, then the smallest relevant pytest slice.
4. If a task changes public API, check docs and TypeScript parity before final handoff.
5. Record skipped provider, credential, network, or AWS-backed checks instead of implying broad integration coverage.

Files in this skill

  • SKILL.md3.6 KB
  • references/api-reference.md10.4 KB
  • references/overview.md3.1 KB
  • references/testing-and-maintenance.md4.1 KB
  • references/troubleshooting.md7.5 KB
  • references/workflows.md6.3 KB
  • scripts/python-core-check.sh8.8 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.