python-packaging
Package Python Projects for Distribution
Python packaging has many layout, metadata, build, and release choices. This skill guides project structure, package metadata, builds, TestPyPI checks, and PyPI publication.
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "python-packaging" from https://skillstore.io/skills/wshobson-python-packaging.md and its manifest at https://skillstore.io/api/skills/wshobson-python-packaging/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "python-packaging". I need to publish my first Python library.
Expected outcome:
A source-layout package plan with required files, metadata fields, build commands, TestPyPI validation, and a release checklist.
Using "python-packaging". I want users to install my tool and run one command.
Expected outcome:
A CLI packaging plan with entry point naming, dependency guidance, local install checks, and documentation sections.
Using "python-packaging". Our team needs repeatable package releases.
Expected outcome:
A release workflow outline covering versioning, wheel builds, artifact checks, PyPI publishing, and CI automation responsibilities.
Security Audit
High RiskMost static findings are false positives caused by Markdown code fences, inline paths, example URLs, and packaging commands. The .pypirc token example is a real sensitive-credential handling risk, but I found no prompt injection, exfiltration intent, or malicious automation.
Confirmed security concerns (1)
Capability review items (2)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Risk Factors
⚙️ External commands (77)
🌐 Network access (21)
📁 Filesystem access (2)
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/wshobson-python-packaging/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/wshobson-python-packaging?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/wshobson-python-packaging?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/wshobson-python-packaging/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/wshobson-python-packaging.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
wshobson. (2026). python-packaging security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/wshobson-python-packaging/audits/8BibTeX citation
@techreport{wshobson-wshobson-python-packaging-2026,
author = {wshobson},
title = {python-packaging security audit report (audit version 8)},
institution = {Skillstore},
year = {2026},
number = {8},
url = {https://skillstore.io/skills/wshobson-python-packaging/audits/8},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "python-packaging security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
- name: "wshobson"
date-released: "2026-07-08"
url: "https://skillstore.io/skills/wshobson-python-packaging/audits/8"
identifiers:
- type: other
value: "skillstore:wshobson-python-packaging:audit:8"
description: "Skillstore immutable audit report identifier"
Compare variants
3 installable variantsEach author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.
Why this variant is first
activeinferenceinstitute-python-packaging
2026-08-21
wshobson-python-packaging
2026-08-21
sickn33-python-packaging
2026-08-21
Skillstore Score
Why this score Evidence Confidence: MediumWhat You Can Build
Prepare a library for PyPI
Create package structure, metadata, build settings, and release checks for a reusable Python library.
Package a command-line tool
Add entry points, CLI examples, dependencies, and installation guidance for a Python command-line application.
Standardize release workflows
Document build, TestPyPI, wheel, and GitHub Actions patterns for repeatable Python package releases.
Try These Prompts
Help me package a Python library named <name>. Recommend a file structure, core metadata, and first release checklist.
Turn my Python script into an installable CLI package. Include entry point guidance, dependencies, tests, and build steps.
Review my package plan for PyPI release. Check metadata, README needs, wheel builds, TestPyPI steps, and publishing risks.
Design packaging for a multi-package Python project. Cover namespace packages, dynamic versioning, private indexes, and automated publishing.
Best Practices
- Use source layout and modern pyproject.toml metadata for distributable packages.
- Build and test packages in a clean environment before publishing.
- Use TestPyPI or trusted publishing workflows before a production PyPI release.
Avoid
- Publishing without testing installation from the built wheel or source distribution.
- Storing real package tokens in shared files, examples, or repository history.
- Using private indexes without documenting trust boundaries and fallback behavior.
Frequently Asked Questions
Does this skill build packages automatically?
Does it support pyproject.toml?
Can it help with CLI tools?
Can it publish to PyPI?
Does it cover private package indexes?
What should users review before release?
Developer Details
Author
wshobsonLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Repository
https://github.com/wshobson/agents/tree/main/plugins/python-development/skills/python-packagingRef
64ca8af0f54a325752f08bd54e52151061ea659a
Maintenance freshness
7/21/2026
Usage
10 downloads · 304 views
File structure
📄 SKILL.md