Pyright LSP

Python language server (Pyright) providing static type checking, code intelligence, and LSP diagnostics for .py and .pyi files. Use when working with Python code that needs type checking, autocomplete suggestions, error detection, or code navigation.

Security Scan

This is an instruction-only skill that documents how to use the Pyright Python language server; its instructions, requirements, and scope are consistent with that purpose and it does not request credentials or hidden installs.

Purpose & Capability

The name and description match the instructions: the SKILL.md explains installing and running Pyright for type checking, diagnostics, and code navigation for .py/.pyi files. Nothing in the skill asks for unrelated capabilities or credentials.

Instruction Scope

Instructions are narrowly focused on running Pyright and creating pyrightconfig.json. They suggest shell commands (which pyright || npm install -g pyright) that will invoke system package managers and operate on project files; this is expected but does instruct installation actions that modify the system environment if executed.

Install Mechanism

There is no automated install spec in the skill (lowest risk). The README recommends installing Pyright via npm, pip, or pipx; those are normal upstream sources (npmjs.org, PyPI). Be aware that running 'npm install -g' performs a global install and uses the network and filesystem.

Credentials

The skill requests no environment variables, credentials, or config paths. The tools it references (npm/pip/pipx/pyright) are proportionate to the stated functionality.

Persistence & Privilege

always is false and the skill is user-invocable. It does not request persistent privileges, modify other skill configs, or require autonomous always-on presence.

Assessment

This skill is an instructions-only integration for using Pyright and appears coherent and low-risk. Before running any of the suggested install commands, decide how you want Pyright installed: prefer pipx or a project virtual environment to avoid global npm installs. Verify the upstream package (npmjs.org / PyPI) and the version you install. Because the SKILL.md contains shell commands that will run on your system if executed, only run them in a trusted environment and avoid running arbitrary install commands from untrusted sources.

Python language server integration providing static type checking and code intelligence through Microsoft's Pyright.

Capabilities

• Type checking: Static analysis of Python types
• Code intelligence: Autocomplete, go-to-definition, find references
• Error detection: Real-time diagnostics for type errors and issues
• Supported extensions: .py, .pyi

Installation Check

Before using, verify Pyright is installed:

which pyright || npm install -g pyright

Alternative installation methods:

pip install pyright
# or
pipx install pyright  # recommended for CLI tools

Usage

Run type checking on Python files:

pyright path/to/file.py

Run on entire project:

cd project-root && pyright

Configuration

Create pyrightconfig.json in project root for custom settings:

{
  "include": ["src"],
  "exclude": ["**/node_modules", "**/__pycache__"],
  "typeCheckingMode": "basic",
  "pythonVersion": "3.10"
}

Integration Pattern

When editing Python code:

1. Run pyright after significant changes
2. Address type errors before committing
3. Use diagnostics to improve code quality

More Information

• Pyright on npm
• Pyright on PyPI
• GitHub Repository