acornprover/.claude/skills/install-ort
.claude/skills/install-ort/SKILL.md
Install ONNX Runtime for the ort crate in a sandboxed environment
$ install --global
skillsauthnpx skillsauth add acornprover/acorn .claude/skills/install-ortInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Mar 30, 2026, 4:49 PM59.5s1 file scanned
SKILL.md
- description:
- Install ONNX Runtime for the ort crate in a sandboxed environment
Install ONNX Runtime (ort) in Sandbox
The ort crate's build script (ort-sys) tries to download ONNX Runtime static libraries at build time. In sandboxed environments, this often fails with TLS certificate errors because the build script's HTTP client doesn't trust the proxy's certificates, even though curl works fine.
Symptoms
Build failures with messages like:
Failed to GET `https://parcel.pyke.io/v2/delivery/ortrs/packages/msort-binary/...`: Connection Failed: tls connection init failed: invalid peer certificate: UnknownIssuer
Fix
1. Determine the required ort-sys version
Check Cargo.toml for the pinned ort version:
grep 'ort' Cargo.toml
The ort-sys version and download URL are determined by the ort version. For ort = "=2.0.0-rc.9", the URL is:
https://parcel.pyke.io/v2/delivery/ortrs/packages/msort-binary/1.20.0/ortrs_static-v1.20.0-x86_64-unknown-linux-gnu.tgz
If you're unsure of the URL, check the build error output — the ort-sys build script prints the full URL it's trying to fetch.
2. Download and extract manually
mkdir -p /tmp/ort-lib
curl -sL https://parcel.pyke.io/v2/delivery/ortrs/packages/msort-binary/1.20.0/ortrs_static-v1.20.0-x86_64-unknown-linux-gnu.tgz -o /tmp/ort-lib/ort.tgz
cd /tmp/ort-lib && tar xzf ort.tgz
Verify the library was extracted:
ls /tmp/ort-lib/onnxruntime/lib/libonnxruntime.a
3. Set ORT_LIB_LOCATION for builds
Prefix all cargo commands with ORT_LIB_LOCATION=/tmp/ort-lib/onnxruntime:
ORT_LIB_LOCATION=/tmp/ort-lib/onnxruntime cargo test --lib
ORT_LIB_LOCATION=/tmp/ort-lib/onnxruntime cargo build --profile release
ORT_LIB_LOCATION=/tmp/ort-lib/onnxruntime cargo check
This tells the ort-sys build script to use the pre-downloaded library instead of fetching it.
4. Verify
ORT_LIB_LOCATION=/tmp/ort-lib/onnxruntime cargo test --lib 2>&1 | tail -5
You should see test results instead of a build failure.
Notes
- The downloaded library persists in
/tmp/ort-lib/for the session. If the sandbox is reset, you'll need to re-download. - This only affects the build environment. The ort crate itself works normally once built.
- For different architectures (e.g., aarch64), adjust the URL accordingly — check the ort-sys build script output for the correct URL.
Related Skills
acornprover/profile
tools
VerifiedTrustedCommunity
Use when asked to profile Acorn prover or verifier performance, investigate where time is spent, or generate a top-down runtime breakdown from `perf` or `samply`.
45SKILL.mdUpdated Apr 15, 2026
acornprover/explicate-feature-flag
development
VerifiedTrustedCommunity
Use when a proof/module verifies in baseline mode but reproving under a prover-affecting feature flag fails. Add explicit proof detail based on the working baseline proof until `cargo run --features <feature> -- verify ...` succeeds.
45SKILL.mdUpdated Apr 15, 2026
acornprover/.claude/skills/profile
tools
VerifiedTrustedCommunity
Profile the prover and generate a top-down performance summary
45SKILL.mdUpdated Mar 27, 2026
acornprover/migrate
development
VerifiedTrustedCommunity
Use when asked to migrate to a feature flag or roll out a manifest-gated acornlib certificate/build-cache or proof-format change. This skill covers feature-flag migrations, including the state-machine workflow for verifier, proof, and cache migrations.
45SKILL.mdUpdated Mar 27, 2026