--extra-index-url makes pip take the highest version from either index, so a public package with your private package's name can win. This skill finds that and nine other requirements-file risks, and tells you how to fix each one.

Your agent runs a scanner on requirements*.txt, requirements*.in and constraints files. It returns BLOCK, REVIEW, or NOT FLAGGED, with the file, line, reason, and a safer approach. Tokens in URLs are never printed.

What it checks

BLOCK (fix before shipping)

• Q01: an index or package URL over plain http://

• Q02: a username, password or token in a URL

• Q03: --trusted-host

REVIEW (check before release)

• Q11: --extra-index-url

• Q12: a requirement not pinned with == (ranges are fine in .in files)

• Q13: a git dependency not pinned to a commit

• Q14: a direct URL with no hash

• Q15: the same package listed twice

• Q16: editable or local path installs

• Q17: only some lines have --hash

What's included

• The scanner (Python 3.9+, standard library only)

• A rules guide with the reason and safer approach for each rule

• A risky and a safe example, and the real report the scanner produces on the risky one

Limits

It reads requirements files as text. It does not read pyproject.toml, Pipfile or lock files, resolve dependencies, or check vulnerability databases. NOT FLAGGED is not a guarantee.

Contents

One ZIP file with 8 files: SKILL.md, the scanner in scripts/ (2 Python files), references/rules.md (every rule with its reason and safer approach), and examples/ (3 example files plus report.md, the real scanner output on the risky example).

How to use: This is an agent skill: a folder with a SKILL.md file and Python scripts that an AI coding agent such as Claude Code, Cursor, or Codex CLI can run. Unzip it into your agent's skills folder (for Claude Code: ~/.claude/skills/), then ask your agent to check your project. The scripts also run on their own with Python 3.9 or newer, with nothing to install. They read your files only: no network access, and nothing is sent anywhere.