Skills python-pytest-patterns

📦

python-pytest-patterns

Name: python-pytest-patterns
Author: 0xDarkMatter

Content revision r1 Medium Risk 🔑 Env variables🌐 Network access⚙️ External commands📁 Filesystem access

Build Reliable Pytest Test Suites

Python teams often need consistent pytest patterns across fixtures, mocks, async tests, and coverage. This skill gives Claude, Codex, and Claude Code practical references and templates for maintainable test suites.

Supports: Claude Codex Code(CC)

⚠️ 50 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "python-pytest-patterns" from https://skillstore.io/skills/0xdarkmatter-python-pytest-patterns.md and its manifest at https://skillstore.io/api/skills/0xdarkmatter-python-pytest-patterns/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/0xdarkmatter-python-pytest-patterns.md Signed manifest GET /api/skills/0xdarkmatter-python-pytest-patterns/manifest Signed lockfile GET /api/skills/0xdarkmatter-python-pytest-patterns/lockfile

Test it

Using "python-pytest-patterns". Ask for pytest tests for a small Python utility module.

Expected outcome:

A concise test plan with named cases, fixture suggestions, expected assertions, and edge cases to cover.

Using "python-pytest-patterns". Ask for a testing strategy for a FastAPI service with a database.

Expected outcome:

A layered testing approach covering unit tests, dependency overrides, rollback fixtures, API client tests, and coverage reporting.

Using "python-pytest-patterns". Ask how to improve flaky async tests.

Expected outcome:

Guidance on pytest-asyncio setup, timeout checks, cancellation tests, fixture cleanup, and avoiding live external services.

Security Audit

Medium Risk

v6 • 7/4/2026 Open versioned report

Most static findings are false positives from Markdown examples, pytest marker names, placeholder secrets, and test-only environment patterns. The confirmed risks are optional Bash helper scripts that run commands, may install pytest-watch, and can write tests/conftest.py. No prompt injection attempt was found in the reviewed files.

Files scanned

2,943

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (3)

Medium

scripts/run-tests.sh:61-68

Helper Script Installs pytest-watch

The watch-mode branch checks for pytest-watch and installs it with pip when missing. This can modify the active Python environment and contact a package index.

The installation command is explicit and reachable through the --watch option. The package name is fixed and testing-related, which limits but does not remove the risk.

Medium

scripts/run-tests.sh:25-50 scripts/run-tests.sh:72-77

Test Runner Executes Pytest With Caller Arguments

The test runner appends unmatched command-line arguments and executes pytest. This is expected for a helper script, but it runs repository test code with user-selected options.

The script clearly builds pytest arguments from caller input and executes pytest. The behavior is legitimate for test tooling, so the concern is operational risk rather than malicious intent.

Medium

scripts/generate-conftest.sh:7-17 scripts/generate-conftest.sh:49-82

Generator Script Writes Project Test Configuration

The conftest generator creates the tests directory and writes tests/conftest.py with generated fixture content. It prompts before overwrite, but still changes project files.

The output path and file writes are explicit. The overwrite prompt lowers severity, and the generated content appears to be pytest boilerplate.

Capability review items (2)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

scripts/generate-conftest.sh:1

Unix shell invocation

#!/bin/bash

This is an executable Bash helper, not just documentation. Review showed it creates a tests directory and writes tests/conftest.py, so it can modify a user project.

Medium

scripts/run-tests.sh:1

Unix shell invocation

#!/bin/bash

This is an executable Bash helper that runs pytest and can install pytest-watch in watch mode. That is legitimate test tooling, but it is real command execution and environment modification.

Risk Factors

🔑 Env variables (20)

🌐 Network access (8)

references/async-testing.md:58 references/integration-testing.md:199 references/integration-testing.md:153 references/integration-testing.md:268 references/integration-testing.md:284 references/mocking-patterns.md:57 references/mocking-patterns.md:258 references/mocking-patterns.md:64

⚙️ External commands (42)

📁 Filesystem access (3)

scripts/run-tests.sh:56 scripts/run-tests.sh:63 scripts/run-tests.sh:83

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/0xdarkmatter-python-pytest-patterns/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/0xdarkmatter-python-pytest-patterns/security.svg)](https://skillstore.io/skills/0xdarkmatter-python-pytest-patterns?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/0xdarkmatter-python-pytest-patterns?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/0xdarkmatter-python-pytest-patterns/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/0xdarkmatter-python-pytest-patterns.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

0xDarkMatter. (2026). python-pytest-patterns security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/0xdarkmatter-python-pytest-patterns/audits/6

BibTeX citation

@techreport{0xdarkmatter-0xdarkmatter-python-pytest-patterns-2026,
  author = {0xDarkMatter},
  title = {python-pytest-patterns security audit report (audit version 6)},
  institution = {Skillstore},
  year = {2026},
  number = {6},
  url = {https://skillstore.io/skills/0xdarkmatter-python-pytest-patterns/audits/6},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "python-pytest-patterns security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
  - name: "0xDarkMatter"
date-released: "2026-07-04"
url: "https://skillstore.io/skills/0xdarkmatter-python-pytest-patterns/audits/6"
identifiers:
  - type: other
    value: "skillstore:0xdarkmatter-python-pytest-patterns:audit:6"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Standardize New Test Suites

Create a consistent pytest layout with shared fixtures, markers, and configuration templates.

Improve Existing Test Coverage

Add parametrized tests, coverage reporting, and focused test architecture guidance to an existing codebase.

Handle Advanced Testing Needs

Apply async, integration, property-based, and mocking patterns for complex Python behavior.

Try These Prompts

Create Basic Pytest Tests

Use the python-pytest-patterns skill to write basic pytest tests for this module. Include clear names, simple assertions, and pytest.raises where needed.

Design Shared Fixtures

Use the python-pytest-patterns skill to design fixtures and a conftest.py layout for this project. Explain fixture scopes and cleanup choices.

Add Mocking and Coverage

Use the python-pytest-patterns skill to add mocking patterns and pytest-cov coverage guidance for this code. Avoid real network calls in unit tests.

Plan Advanced Test Architecture

Use the python-pytest-patterns skill to propose a test architecture for unit, integration, async, and property-based tests. Include risks and CI recommendations.

Best Practices

Review shell scripts before running them, especially in repositories with sensitive configuration.
Keep unit tests isolated by mocking network, filesystem, and external service boundaries.
Use fixtures with clear scope and explicit cleanup to prevent hidden test coupling.

Avoid

Do not copy broad environment-clearing fixtures into a project without checking required variables.
Do not rely on live external URLs for routine unit or CI tests.
Do not treat coverage percentage as a substitute for meaningful assertions and edge-case tests.