skills/ai-agency/model-trainer/SKILL.md
Fine-tuning pipeline for small open models using LoRA/QLoRA. Trains domain-specific adapters from conversation logs, codebase files, or custom datasets. Pre-built recipes for writing style, codebase conventions, and domain vocabulary. Exports to LiteLLM for immediate use.
npx skillsauth add 47network/Sven model-trainerInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Fine-tunes small open models (Qwen3-4B, Gemma-2B, etc.) on domain-specific data using LoRA/QLoRA adapters.
Training Data Sources → Data Prep → LoRA Fine-Tune → Evaluation → Export to LiteLLM
↓ ↓ ↓
Conversation Logs HuggingFace PEFT LiteLLM Model Registry
RAG Documents bitsandbytes QLoRA Local Model Fleet
File Uploads Transformers Trainer
Inline Samples
| Recipe | Base Model | Purpose | Epochs | |-----------------------|-----------------|--------------------------------------------|--------| | writing_style | Qwen2.5-4B | Match user's tone, vocabulary, structure | 3 | | codebase_conventions | Qwen2.5-4B | Learn project patterns and naming | 2 | | domain_vocabulary | Qwen2.5-4B | Domain-specific terms and knowledge | 5 |
[{role, content}]{instruction, output}{prompt, chosen, rejected}development
Automated web testing advisor — generate Playwright test scripts, accessibility checks, and performance audits.
testing
Unified security posture reporting — combines SAST, dependency audit, secret scan, infrastructure scan, and pentest results into a single scored report with OWASP and SOC 2 compliance mapping, top risks, and remediation recommendations.
development
Detect hardcoded secrets, API keys, tokens, private keys, and credentials in source code and config files. 20 built-in patterns covering AWS, GitHub, Slack, Stripe, database URLs, JWTs, and more.
development
Static Application Security Testing — scan TypeScript/JavaScript source code for SQL injection, XSS, SSRF, path traversal, command injection, hardcoded secrets, insecure crypto, auth bypass, prototype pollution, and more. 14 built-in rules mapped to OWASP Top 10 and CWE.