Skip to main content
agentsSource-backed

Jupytext Reproducible Notebook Agent

Source-backed agent for reviewing local-first Jupyter notebook workflows that use Jupytext text notebooks, paired notebooks, command-line sync, and version-control friendly reproducibility checks.

by MkDev11·added 2026-06-05·
Review first review before installing

Open the source and read safety notes before installing.

Citation facts

Source-backed facts for citing this resource, derived directly from the registry — also available as plain text for AI assistants.

Source URLs
https://jupytext.readthedocs.io/en/latest/, https://github.com/jupytext/jupytext
Safety notes
Jupytext itself converts, pairs, syncs, and pipes notebooks, but executing a notebook can run arbitrary project Python, R, Julia, shell, SQL, or notebook magics with the current user's local permissions., Treat `jupytext --sync`, `--set-formats`, `--to`, `--execute`, and `--pipe` operations as file-changing review steps. Inspect diffs before and after them, and avoid running them on untrusted notebooks without isolation., Do not overwrite notebook state when both the text representation and `.ipynb` file were edited independently. Stop and ask the user to choose the authoritative source before resolving sync conflicts., Keep destructive data writes, external service calls, model/API usage, and large artifact regeneration behind explicit approval and environment checks.
Privacy notes
Notebook source, outputs, execution counts, metadata, local paths, dataset samples, plots, logs, and exception traces can contain personal data, credentials, customer records, research data, or proprietary business logic., Text notebooks make code and markdown easier for an AI assistant to read, which also means secrets and sensitive local paths in cells become easier to expose in prompts, diffs, reviews, and generated summaries., Prefer committing source-only text notebooks when possible, and keep bulky outputs, raw datasets, credentials, local cache paths, and generated artifacts out of the model transcript unless the user explicitly approves sharing them., If a notebook calls external APIs, databases, cloud storage, or AI services, document what data leaves the local machine and verify credentials are loaded from the user's secure environment rather than notebook cells.
Author
MkDev11
Submitted by
MkDev11
Claim status
unclaimed
Last verified
2026-06-05

Decision playbook

Review trust signals before you adopt

Signals are present but mixed. Use the checklist below to confirm the source and operational safety for your environment.

Compare context
Selected

0

Current score

63

Baseline

Delta

No baseline selected

No major trust-signal divergence detected in the current selection.

Source and provenance checks

Needs review

Confirm ownership and provenance before trusting install instructions.

  • Source link availableRequired

    Open the canonical repository and verify ownership.

    Done
  • Source provenance statusRequired

    Marked as source-backed.

    Done
  • Metadata reviewed

    No reviewed flag detected in metadata.

    Pending

Safety and privacy checks

Complete

Validate risk disclosures before installation or API wiring.

  • Safety notes presentRequired

    Review the listed safety guidance before running commands.

    Done
  • Privacy notes presentRequired

    Review data handling notes before connecting accounts or secrets.

    Done
  • Trust level risk gateRequired

    Trust level does not block evaluation.

    Done

Package and install checks

Needs review

Check package metadata and artifact integrity signals.

  • Install payload available

    Install or copy payload is available for review.

    Done
  • Package verification flag

    No package verification flag provided.

    Pending
  • Checksum metadata

    No checksum provided for downloaded artifact.

    Pending

Compare-driven decision checks

Needs review

Use compare context to validate trade-offs before adoption.

  • Compare tray has multiple entries

    Add at least one more entry to compare trust differences.

    Pending
  • Baseline comparison available

    No baseline peer selected yet.

    Pending
  • Diverging trust signals identified

    No major trust-signal divergence found.

    Pending

Setup at a glance

Copy & paste

Copy-ready — paste the snippet to get started.

Adoption plan

Balanced adoption plan

Current risk score 24/100. Use staged verification before broader rollout.

Risk 24

Pre-adoption checks

Validate source and review signals before any execution.

  • Confirm source provenanceRequired

    Source URL/provenance metadata is present.

    Done
  • Confirm metadata review state

    No review metadata found; increase manual validation.

    Pending
  • Verify install payload

    Install/config payload exists and can be inspected.

    Done

Security checks

Confirm safety, privacy, and package integrity signals.

  • Review safety notesRequired

    Safety notes are present.

    Done
  • Review privacy notesRequired

    Privacy notes are present.

    Done
  • Verify package integrity metadata

    No package verification/checksum metadata.

    Pending

Rollout

Adopt in controlled steps based on the selected plan.

  • Run in isolated sandbox firstRequired

    Use a constrained sandbox and observe behavior across multiple tasks.

    Pending
  • Roll out graduallyRequired

    Roll out to a small cohort before wider usage.

    Pending
  • Set monitoring and fallback

    Define rollback path and monitor errors after adoption.

    Pending

Evidence readiness

Evidence readiness matrix · balanced

Missing required evidence: Metadata review. Risk score 31.

Risk 31

Source provenance

Present

Source repository/provenance is listed.

Required in this preset

Metadata review

Missing

Review metadata is missing.

Required in this preset

Safety notes

Present

Safety notes are present.

Required in this preset

Privacy notes

Present

Privacy notes are present.

Optional in this preset

Package integrity

Missing

Package integrity metadata is missing.

Optional in this preset

Install payload

Present

Install payload is available.

Required in this preset

Required gaps: Metadata review

Decision timeline

Decision timeline · balanced

Blocking gaps: Check metadata review status. Risk 28.

Risk 28

triage

Confirm source provenanceRequired

Source/provenance metadata is available.

Done

triage

Check metadata review statusRequired

Review metadata is missing.

Pending

verify

Review safety notesRequired

Safety notes are available.

Done

verify

Review privacy notes

Privacy notes are available.

Done

verify

Validate package integrity metadata

Package integrity metadata is missing.

Pending

rollout

Verify install payload and commandsRequired

Install payload is available.

Done

Blockers: Check metadata review status

Prerequisite readiness

Prerequisite readiness

4 prerequisites to line up before setup. Includes a review or approval gate.

0/4 ready
Install & runtime1Permissions & scopes1Review & approval1General1

Safety & privacy surface

Safety & privacy surface

4 safety and 4 privacy notes across 4 risk areas. Review closely: credentials & tokens, permissions & scopes, third-party handling.

4 areas
  • SafetyPermissions & scopesJupytext itself converts, pairs, syncs, and pipes notebooks, but executing a notebook can run arbitrary project Python, R, Julia, shell, SQL, or notebook magics with the current user's local permissions.
  • SafetyLocal filesTreat `jupytext --sync`, `--set-formats`, `--to`, `--execute`, and `--pipe` operations as file-changing review steps. Inspect diffs before and after them, and avoid running them on untrusted notebooks without isolation.
  • SafetyLocal filesDo not overwrite notebook state when both the text representation and `.ipynb` file were edited independently. Stop and ask the user to choose the authoritative source before resolving sync conflicts.
  • SafetyThird-party handlingKeep destructive data writes, external service calls, model/API usage, and large artifact regeneration behind explicit approval and environment checks.
  • PrivacyCredentials & tokensNotebook source, outputs, execution counts, metadata, local paths, dataset samples, plots, logs, and exception traces can contain personal data, credentials, customer records, research data, or proprietary business logic.
  • PrivacyCredentials & tokensText notebooks make code and markdown easier for an AI assistant to read, which also means secrets and sensitive local paths in cells become easier to expose in prompts, diffs, reviews, and generated summaries.
  • PrivacyCredentials & tokensPrefer committing source-only text notebooks when possible, and keep bulky outputs, raw datasets, credentials, local cache paths, and generated artifacts out of the model transcript unless the user explicitly approves sharing them.
  • PrivacyCredentials & tokensIf a notebook calls external APIs, databases, cloud storage, or AI services, document what data leaves the local machine and verify credentials are loaded from the user's secure environment rather than notebook cells.

Safety notes

  • Jupytext itself converts, pairs, syncs, and pipes notebooks, but executing a notebook can run arbitrary project Python, R, Julia, shell, SQL, or notebook magics with the current user's local permissions.
  • Treat `jupytext --sync`, `--set-formats`, `--to`, `--execute`, and `--pipe` operations as file-changing review steps. Inspect diffs before and after them, and avoid running them on untrusted notebooks without isolation.
  • Do not overwrite notebook state when both the text representation and `.ipynb` file were edited independently. Stop and ask the user to choose the authoritative source before resolving sync conflicts.
  • Keep destructive data writes, external service calls, model/API usage, and large artifact regeneration behind explicit approval and environment checks.

Privacy notes

  • Notebook source, outputs, execution counts, metadata, local paths, dataset samples, plots, logs, and exception traces can contain personal data, credentials, customer records, research data, or proprietary business logic.
  • Text notebooks make code and markdown easier for an AI assistant to read, which also means secrets and sensitive local paths in cells become easier to expose in prompts, diffs, reviews, and generated summaries.
  • Prefer committing source-only text notebooks when possible, and keep bulky outputs, raw datasets, credentials, local cache paths, and generated artifacts out of the model transcript unless the user explicitly approves sharing them.
  • If a notebook calls external APIs, databases, cloud storage, or AI services, document what data leaves the local machine and verify credentials are loaded from the user's secure environment rather than notebook cells.

Prerequisites

  • Local checkout of the notebook project, including `.ipynb`, `.py`, `.md`, `.R`, `.jl`, or `.qmd` notebook sources under review.
  • Jupytext installed in the same Python environment used by Jupyter, with project pairing rules available from notebook metadata, `jupytext.toml`, `pyproject.toml`, or related configuration.
  • Dataset manifest, environment lockfile or package manifest, kernel information, and expected output policy for the analysis.
  • Permission to inspect notebook source, configuration, execution logs, generated outputs, and local data paths needed for reproducibility checks.

Schema details

Install type
copy
Troubleshooting
No
Source repository stats
Scope
Source repo
Full copyable content
## Content

Jupytext Reproducible Notebook Agent is a reusable agent prompt for local-first
data analysis projects that store notebook source as plain text while keeping
Jupyter notebook workflows available. It helps Claude review paired notebooks,
sync configuration, execution assumptions, clean diffs, data boundaries, and
collaboration risks before a notebook change is committed or shared.

Use this agent when a project uses Jupytext to pair `.ipynb` notebooks with
text formats such as `py:percent`, Markdown, MyST Markdown, Quarto Markdown, R,
Julia, or other script formats. The agent should keep the text notebook as the
reviewable source of truth unless the project explicitly says otherwise.

## Agent Prompt

You are a Jupytext reproducible notebook specialist. Use the official Jupytext
documentation, repository, and package metadata as the source of truth for
notebook pairing, text formats, command-line behavior, and sync workflows.

Mission:

- Review local-first notebook projects for reproducibility, clean version
  control, safe execution, and privacy-aware data handling.
- Prefer text notebook diffs for review while preserving the user's intended
  `.ipynb` output policy.
- Make sync direction, execution assumptions, generated artifacts, and
  unresolved conflicts explicit before recommending a commit.

Operating rules:

1. Identify the notebook format policy from notebook metadata, `jupytext.toml`,
   `pyproject.toml`, repository docs, pre-commit hooks, CI scripts, and nearby
   examples.
2. Inventory every notebook pair: `.ipynb` plus `.py`, `.md`, `.R`, `.jl`,
   `.qmd`, or another configured text representation.
3. Check whether the text file, `.ipynb` file, or both are meant to be committed.
   Report any mismatch with `.gitignore`, CI, docs, or review norms.
4. Before running commands, inspect the notebook for shell escapes, package
   installation cells, network calls, database writes, filesystem writes, API
   keys, hidden state assumptions, and large output generation.
5. Use read-only review first. Only propose `jupytext --sync`,
   `jupytext --to`, `jupytext --set-formats`, `jupytext --pipe`, or notebook
   execution after explaining the files that may change.
6. If both paired representations changed independently, stop and ask which
   file is authoritative. Do not silently pick a winner.
7. Review reproducibility evidence: package locks, kernel metadata, environment
   variables, data version or checksum, deterministic seeds, execution order,
   and expected output freshness.
8. Summarize exactly what was checked, what remains unverified, and which files
   should or should not be committed.

Output contract:

- Project summary: notebook formats, pairing rules, committed artifacts, and
  execution environment.
- Sync findings: stale pairs, missing text representations, divergent files,
  ignored outputs, and conflict risks.
- Reproducibility findings: environment gaps, data dependencies, hidden state,
  non-determinism, and commands needed to rerun the analysis.
- Safety and privacy findings: risky cells, data exposure, secrets, local paths,
  network calls, and generated artifacts that should stay out of commits.
- Recommended next steps: exact commands to run, files to inspect, validation
  evidence to collect, and a commit/no-commit decision.

## Features

- Source-backed Jupytext role for notebooks stored as plain text and paired
  with `.ipynb` files.
- Pairing review for notebook metadata, `jupytext.toml`, `pyproject.toml`, and
  project conventions.
- Clean-diff workflow for `py:percent`, Markdown, MyST Markdown, Quarto
  Markdown, R, Julia, and other supported text notebook styles.
- Sync checklist for `jupytext --sync`, `--set-formats`, `--to`, `--pipe`, and
  execution-related command usage.
- Reproducibility checklist for environment locks, kernels, data manifests,
  deterministic seeds, execution order, and expected output policy.
- Privacy review for outputs, local paths, dataset samples, exception traces,
  API calls, credentials, and generated artifacts.

## Use Cases

- Review a pull request that changes a text-paired notebook before the `.ipynb`
  representation is regenerated.
- Convert an existing notebook workflow to a source-control friendly Jupytext
  pairing policy.
- Decide whether `.ipynb` outputs should be committed, ignored, regenerated in
  CI, or stored as separate artifacts.
- Audit a data analysis notebook for hidden state, non-deterministic execution,
  missing package locks, or undocumented data dependencies.
- Prepare a reproducible research handoff where collaborators need to run the
  notebook locally without seeing unrelated local files or secrets.
- Resolve a notebook sync conflict without losing changes from either the text
  notebook or the `.ipynb` file.

## Source Notes

- The official Jupytext documentation describes text notebooks as plain-text
  representations of notebooks that are suited to version control, IDE editing,
  and reviewable diffs.
- The documentation describes paired notebooks as sets of files, such as
  `.ipynb` and `.py`, that contain the same notebook in different formats.
- The command-line documentation covers converting notebooks, setting formats,
  syncing paired representations, executing notebooks, and piping notebooks
  through tools such as formatters.
- The configuration documentation describes project-level pairing rules through
  `jupytext.toml` or `pyproject.toml`.
- The GitHub repository identifies Jupytext as "Jupyter Notebooks as Markdown
  Documents, Julia, Python or R scripts" and publishes the MIT-licensed source.
- PyPI package metadata for `jupytext` lists the current package, Python
  requirement, documentation URL, source URL, and MIT license metadata.

## Duplicate Check

Before drafting this entry, the current upstream content tree and live PR
history were checked for `Jupytext`, `jupytext`, `mwouts/jupytext`, the
Jupytext documentation URL, paired notebooks, local-first data analysis, and
reproducible notebook variants. No existing `content/agents`, `content/skills`,
`content/guides`, `content/commands`, `content/rules`, or `content/mcp` entry
covers Jupytext or a Jupytext-specific reproducible notebook agent.

The first candidate for this slot was Marimo, but that tool is already covered
by the merged `content/tools/marimo.mdx` entry. This agent uses Jupytext instead
because it has a distinct source domain, package, repository, workflow, and
review role focused on notebook pairing and source-control reproducibility.

## Editorial Disclosure

Submitted as an independent community agent entry by `MkDev11`. This listing is
based on Jupytext's official documentation, repository, and PyPI metadata, with
no paid placement, referral link, or affiliate relationship.

## Sources

- Jupytext documentation: https://jupytext.readthedocs.io/en/latest/
- Jupytext CLI documentation: https://jupytext.readthedocs.io/en/latest/using-cli.html
- Jupytext configuration documentation: https://jupytext.readthedocs.io/en/latest/config.html
- Jupytext repository: https://github.com/mwouts/jupytext
- Jupytext PyPI package: https://pypi.org/project/jupytext/

About this resource

Content

Jupytext Reproducible Notebook Agent is a reusable agent prompt for local-first data analysis projects that store notebook source as plain text while keeping Jupyter notebook workflows available. It helps Claude review paired notebooks, sync configuration, execution assumptions, clean diffs, data boundaries, and collaboration risks before a notebook change is committed or shared.

Use this agent when a project uses Jupytext to pair .ipynb notebooks with text formats such as py:percent, Markdown, MyST Markdown, Quarto Markdown, R, Julia, or other script formats. The agent should keep the text notebook as the reviewable source of truth unless the project explicitly says otherwise.

Agent Prompt

You are a Jupytext reproducible notebook specialist. Use the official Jupytext documentation, repository, and package metadata as the source of truth for notebook pairing, text formats, command-line behavior, and sync workflows.

Mission:

  • Review local-first notebook projects for reproducibility, clean version control, safe execution, and privacy-aware data handling.
  • Prefer text notebook diffs for review while preserving the user's intended .ipynb output policy.
  • Make sync direction, execution assumptions, generated artifacts, and unresolved conflicts explicit before recommending a commit.

Operating rules:

  1. Identify the notebook format policy from notebook metadata, jupytext.toml, pyproject.toml, repository docs, pre-commit hooks, CI scripts, and nearby examples.
  2. Inventory every notebook pair: .ipynb plus .py, .md, .R, .jl, .qmd, or another configured text representation.
  3. Check whether the text file, .ipynb file, or both are meant to be committed. Report any mismatch with .gitignore, CI, docs, or review norms.
  4. Before running commands, inspect the notebook for shell escapes, package installation cells, network calls, database writes, filesystem writes, API keys, hidden state assumptions, and large output generation.
  5. Use read-only review first. Only propose jupytext --sync, jupytext --to, jupytext --set-formats, jupytext --pipe, or notebook execution after explaining the files that may change.
  6. If both paired representations changed independently, stop and ask which file is authoritative. Do not silently pick a winner.
  7. Review reproducibility evidence: package locks, kernel metadata, environment variables, data version or checksum, deterministic seeds, execution order, and expected output freshness.
  8. Summarize exactly what was checked, what remains unverified, and which files should or should not be committed.

Output contract:

  • Project summary: notebook formats, pairing rules, committed artifacts, and execution environment.
  • Sync findings: stale pairs, missing text representations, divergent files, ignored outputs, and conflict risks.
  • Reproducibility findings: environment gaps, data dependencies, hidden state, non-determinism, and commands needed to rerun the analysis.
  • Safety and privacy findings: risky cells, data exposure, secrets, local paths, network calls, and generated artifacts that should stay out of commits.
  • Recommended next steps: exact commands to run, files to inspect, validation evidence to collect, and a commit/no-commit decision.

Features

  • Source-backed Jupytext role for notebooks stored as plain text and paired with .ipynb files.
  • Pairing review for notebook metadata, jupytext.toml, pyproject.toml, and project conventions.
  • Clean-diff workflow for py:percent, Markdown, MyST Markdown, Quarto Markdown, R, Julia, and other supported text notebook styles.
  • Sync checklist for jupytext --sync, --set-formats, --to, --pipe, and execution-related command usage.
  • Reproducibility checklist for environment locks, kernels, data manifests, deterministic seeds, execution order, and expected output policy.
  • Privacy review for outputs, local paths, dataset samples, exception traces, API calls, credentials, and generated artifacts.

Use Cases

  • Review a pull request that changes a text-paired notebook before the .ipynb representation is regenerated.
  • Convert an existing notebook workflow to a source-control friendly Jupytext pairing policy.
  • Decide whether .ipynb outputs should be committed, ignored, regenerated in CI, or stored as separate artifacts.
  • Audit a data analysis notebook for hidden state, non-deterministic execution, missing package locks, or undocumented data dependencies.
  • Prepare a reproducible research handoff where collaborators need to run the notebook locally without seeing unrelated local files or secrets.
  • Resolve a notebook sync conflict without losing changes from either the text notebook or the .ipynb file.

Source Notes

  • The official Jupytext documentation describes text notebooks as plain-text representations of notebooks that are suited to version control, IDE editing, and reviewable diffs.
  • The documentation describes paired notebooks as sets of files, such as .ipynb and .py, that contain the same notebook in different formats.
  • The command-line documentation covers converting notebooks, setting formats, syncing paired representations, executing notebooks, and piping notebooks through tools such as formatters.
  • The configuration documentation describes project-level pairing rules through jupytext.toml or pyproject.toml.
  • The GitHub repository identifies Jupytext as "Jupyter Notebooks as Markdown Documents, Julia, Python or R scripts" and publishes the MIT-licensed source.
  • PyPI package metadata for jupytext lists the current package, Python requirement, documentation URL, source URL, and MIT license metadata.

Duplicate Check

Before drafting this entry, the current upstream content tree and live PR history were checked for Jupytext, jupytext, mwouts/jupytext, the Jupytext documentation URL, paired notebooks, local-first data analysis, and reproducible notebook variants. No existing content/agents, content/skills, content/guides, content/commands, content/rules, or content/mcp entry covers Jupytext or a Jupytext-specific reproducible notebook agent.

The first candidate for this slot was Marimo, but that tool is already covered by the merged content/tools/marimo.mdx entry. This agent uses Jupytext instead because it has a distinct source domain, package, repository, workflow, and review role focused on notebook pairing and source-control reproducibility.

Editorial Disclosure

Submitted as an independent community agent entry by MkDev11. This listing is based on Jupytext's official documentation, repository, and PyPI metadata, with no paid placement, referral link, or affiliate relationship.

Sources

Source citations

Add this badge to your README

Show that Jupytext Reproducible Notebook Agent is listed on HeyClaude. Paste this Markdown into your README — it renders the badge and links back to this page.

Listed on HeyClaude
[![Listed on HeyClaude](https://heyclau.de/badge/agents/jupytext-reproducible-notebook-agent.svg)](https://heyclau.de/entry/agents/jupytext-reproducible-notebook-agent)

How it compares

Jupytext Reproducible Notebook Agent side by side with 2 alternatives on trust, install, platform support, and disclosed safety notes — all from reviewed registry metadata.

1 trust signal differ across this comparison (Submitter).

Field

Source-backed agent for reviewing local-first Jupyter notebook workflows that use Jupytext text notebooks, paired notebooks, command-line sync, and version-control friendly reproducibility checks.

Open dossier

Source-backed Claude Code subagent prompt for reviewing Agent Skills before adoption or publication, checking SKILL.md scope, descriptions, invocation control, supporting files, tool permissions, helpfulness, safety, and privacy risks against official Claude Code skills guidance.

Open dossier

An agent prompt for curating an organization's Agent Skills: reviewing each SKILL.md name and description, scope (personal, project, or plugin) and precedence, per-skill allowed-tools, and whether Claude or the user invokes it.

Open dossier
Next steps
Trust
Review statusNot reviewedNot reviewedNot reviewed
Package trustPackage not verifiedPackage not verifiedPackage not verified
Source provenanceSource-backedSource-backedSource-backed
SubmitterDiffersMkDev11Desel72JPette1783
Install riskReview firstReview firstReview first
Notes Safety ✓ Privacy ✓ Safety ✓ Privacy ✓ Safety ✓ Privacy ✓
Brand
Categoryagentsagentsagents
SourceSource-backedSource-backedSource-backed
AuthorMkDev11Desel72JPette1783
Added2026-06-052026-06-082026-06-05
Platforms
Harness
Source repo
Safety notesJupytext itself converts, pairs, syncs, and pipes notebooks, but executing a notebook can run arbitrary project Python, R, Julia, shell, SQL, or notebook magics with the current user's local permissions. Treat `jupytext --sync`, `--set-formats`, `--to`, `--execute`, and `--pipe` operations as file-changing review steps. Inspect diffs before and after them, and avoid running them on untrusted notebooks without isolation. Do not overwrite notebook state when both the text representation and `.ipynb` file were edited independently. Stop and ask the user to choose the authoritative source before resolving sync conflicts. Keep destructive data writes, external service calls, model/API usage, and large artifact regeneration behind explicit approval and environment checks.This agent reviews skill quality and adoption readiness; it does not execute the skill, install plugins, run scripts, or approve production rollout by itself. Flag skills that can perform writes, deployments, destructive actions, account changes, network calls, credential handling, or background automation without explicit user control. Recommend `disable-model-invocation: true`, least-privilege `allowed-tools`, or additional human review when a skill has side effects or could trigger too broadly. Treat supporting files, shell injection blocks, and bundled scripts as executable or instruction-bearing review surfaces, not harmless documentation.This agent curates and reviews skills; it does not execute them. Recommend tool restrictions (allowed-tools) for skills that touch sensitive actions, and invocation control for skills with side effects. Flag skills whose descriptions could cause the model to auto-invoke them in inappropriate contexts.
Privacy notesNotebook source, outputs, execution counts, metadata, local paths, dataset samples, plots, logs, and exception traces can contain personal data, credentials, customer records, research data, or proprietary business logic. Text notebooks make code and markdown easier for an AI assistant to read, which also means secrets and sensitive local paths in cells become easier to expose in prompts, diffs, reviews, and generated summaries. Prefer committing source-only text notebooks when possible, and keep bulky outputs, raw datasets, credentials, local cache paths, and generated artifacts out of the model transcript unless the user explicitly approves sharing them. If a notebook calls external APIs, databases, cloud storage, or AI services, document what data leaves the local machine and verify credentials are loaded from the user's secure environment rather than notebook cells.Reads local skill instructions and supporting files, which may expose internal workflow names, repository paths, policies, examples, customer data, or credentials accidentally written into prompts. Review output can mention sensitive skill names, tool permissions, file paths, dynamic commands, and risk findings; keep it out of public PR comments unless sanitized. Skills loaded by Claude can place their descriptions or full instructions into model context, so the review should flag secrets and unnecessary confidential details before adoption.Skill descriptions load each session; keep sensitive workflow detail and secrets out of them. Skills sourced from outside the org should be reviewed before adoption, since their instructions run in your sessions. Use settings-level overrides to hide or disable model-invocation of skills you did not author without editing their files.
Prerequisites
  • Local checkout of the notebook project, including `.ipynb`, `.py`, `.md`, `.R`, `.jl`, or `.qmd` notebook sources under review.
  • Jupytext installed in the same Python environment used by Jupyter, with project pairing rules available from notebook metadata, `jupytext.toml`, `pyproject.toml`, or related configuration.
  • Dataset manifest, environment lockfile or package manifest, kernel information, and expected output policy for the analysis.
  • Permission to inspect notebook source, configuration, execution logs, generated outputs, and local data paths needed for reproducibility checks.
  • One or more Agent Skill directories with a `SKILL.md` file and any referenced supporting files.
  • Access to the skill's intended user, task boundary, invocation path, and expected output.
  • A clear policy for whether the skill may be model-invoked automatically or must be user-invoked.
  • Permission to inspect tool restrictions, dynamic context commands, scripts, examples, templates, and bundled plugin metadata if present.
  • A set of Agent Skills (personal, project, or plugin) with their SKILL.md files.
  • Knowledge of which skills should be org-wide versus project-specific.
  • Ability to edit skill frontmatter and settings such as skill overrides.
Install
Config
Citations
ClaimUnclaimedUnclaimedUnclaimed
Open 3 picks in the interactive comparison tool

Signals

Loading live community signals…

More like this, weekly

A short, calm digest of reviewed Claude resources. Unsubscribe any time.