Install
$ agentstack add skill-yale-som-hpc-claude-code-marketplace-installing-software Open-source listing, not yet scanned by AgentStack. Follow the source repository for install instructions.
Security review
⚠ Flagged1 finding(s); flagged for manual review. · v0.1.0 How review works →
- • Prompt-injection patterns
- • Secret / credential exfiltration
- • Dangerous shell & filesystem operations
- • Untrusted network calls
- • Known-malicious package signatures
- high Pipes remote content directly into a shell (remote code execution).
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Installing Software
Rule: prefer cluster modules for system software, uv/renv for language packages, and static binaries in ~/.local/bin for user tools.
Modules first
module avail
module spider git
module spider r
module spider cuda
module load git
module load r
Important: Git may require module load git. Do not assume it is in the default PATH.
For Python projects, prefer uv and a project .venv over loading a generic Python module. Use the Python module only when you specifically need cluster-provided Python or a module-provided package.
In reusable shell scripts and Slurm scripts, load required modules explicitly rather than relying on your interactive shell state:
module purge
module load git
module load r
User binaries
Put user-installed command-line tools here:
mkdir -p ~/.local/bin ~/go/bin
export PATH="$HOME/.local/bin:$HOME/go/bin:$PATH"
Prefer statically-linked builds from GitHub releases if available. Inspect "curl to sh" install patterns prior to using those. Common per-user tools:
uv— Python project manager (install snippet below).duckdb— CLI for SQL over Parquet/CSV/JSON; not module-loadable on the cluster. See [accelerating Python](../accelerating-python/SKILL.md#installing-the-cli-tools).qsv— fast CSV triage; not module-loadable. Same place.gh— GitHub CLI.jq— JSON on the command line.ripgrep— fast recursive grep.croc,rclone— file transfer (see [using the filesystem](../using-the-filesystem/SKILL.md#moving-files)).
Prefer static or musl binaries
If a GitHub release offers a Linux musl build, prefer it:
x86_64-unknown-linux-musl
x86_64-musl
static-linux-amd64
Why: modern prebuilt binaries often require a newer glibc than the cluster provides. Static/musl builds avoid many GLIBC_2.xx not found errors.
Typical failure:
./tool: /lib64/libc.so.6: version `GLIBC_2.38' not found
Fix: download a musl/static build, use a module, build in Apptainer, or compile on the cluster.
Install uv
Install uv once into your user tools directory:
mkdir -p ~/.local/bin
curl -LsSf https://astral.sh/uv/install.sh | sh
export PATH="$HOME/.local/bin:$PATH"
uv --version
Then use it per project:
cd /gpfs/project/myproject/code
uv init --app
uv add polars pyarrow duckdb
uv sync
GitHub CLI
module load git
gh auth login
gh repo clone owner/repo
If SSH auth fails, see [connecting securely](../connecting-securely/SKILL.md).
When to use Apptainer
Apptainer is not in the default PATH. Load the module first, and run pulls inside a Slurm job (a pull is compute + network) — point the cache and tmp dirs at scratch so a large image doesn't fill your home directory:
export APPTAINER_CACHEDIR=/gpfs/scratch60/$USER/.apptainer/cache
export APPTAINER_TMPDIR=/gpfs/scratch60/$USER/.apptainer/tmp
mkdir -p "$APPTAINER_CACHEDIR" "$APPTAINER_TMPDIR"
module load apptainer
apptainer pull docker://alpine:3.20
apptainer exec alpine_3.20.sif cat /etc/os-release # runs as you, no root
(On compute nodes an older system Apptainer may shadow the module — check apptainer --version inside the job if you need a specific version.)
Use Apptainer when:
- binaries need incompatible system libraries
- software has complex C/CUDA dependencies
- you need reproducibility beyond Python/R lockfiles
- a Docker image already exists
For Python: use uv
System Python, pip install --user, and conda environments all leak state between projects, slow down GPFS, or both. uv is the way.
cd /gpfs/project/myproject/code
uv add polars pyarrow duckdb
uv sync --frozen
uv add + uv sync --frozen at setup time on a login node. Then jobs run srun .venv/bin/python .... Never pip install --user, never conda create -n job_$SLURM_JOB_ID, never pip install inside a Slurm array. Commit pyproject.toml and uv.lock.
XDG directories
Keep caches out of crowded home directories when possible:
export XDG_CACHE_HOME="/gpfs/scratch60/$USER/.cache"
export XDG_CONFIG_HOME="$HOME/.config"
export XDG_DATA_HOME="$HOME/.local/share"
Create them:
mkdir -p "$XDG_CACHE_HOME" "$XDG_CONFIG_HOME" "$XDG_DATA_HOME" ~/.local/bin
Checklist
- [ ] Try
module spider/module loadfirst. - [ ] User binaries go in
~/.local/binor~/go/bin. - [ ]
~/.local/binis before system paths inPATH. - [ ] Caches use
XDG_CACHE_HOMEwhen heavy. - [ ] Static/musl binaries are preferred for standalone tools.
- [ ] No
sudo, no credentials in install scripts, no per-job environments.
Further reading
- uv documentation —
uv init,uv add,uv run, lockfile and Python interpreter management. - Lmod user guide —
module spider, dependency hierarchy,module purge. - Apptainer user guide — building, pulling, running containers without root.
- XDG Base Directory spec —
XDG_CACHE_HOME/XDG_CONFIG_HOME/XDG_DATA_HOME.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: yale-som-hpc
- Source: yale-som-hpc/claude-code-marketplace
- License: Unlicense
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.