helpers/skills/python-packaging-env-finder/SKILL.md
Use this skill to investigate environment variables that can be set when building Python wheels for a given project. Analyzes setup.py, CMake files, and other build configuration files to discover customizable build environment variables.
npx skillsauth add opendatahub-io/ai-helpers python-packaging-env-finderInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
This skill helps you discover all environment variables that can be set when building Python wheels for a project. It performs a comprehensive analysis of build configuration files to identify customizable environment variables used during the wheel building process.
When a user asks about environment variables for building Python wheels, investigating build configuration, or understanding build customization options:
Run the Environment Variables Investigation Script:
./scripts/env_finder.py [project_path]
Analyze and present the findings focusing on:
CC, CXX - Compiler selectionCFLAGS, CXXFLAGS - Compilation flagsLDFLAGS - Linker flagsLIBS - Additional librariesPREFIX - Installation prefixLIBRARY_PATH - Library search pathsINCLUDE_PATH - Header file pathsPKG_CONFIG_PATH - pkg-config search pathsENABLE_* - Feature enable/disable flagsWITH_* - Optional component inclusionUSE_* - Build option selectionDISABLE_* - Feature disable flagsPYTHON_INCLUDE_DIR - Python headers locationPYTHON_LIBRARY - Python library pathSETUPTOOLS_* - Setuptools configurationPIP_* - pip-related build variablesProvide actionable guidance:
The skill should provide a structured list of environment variables with:
tools
Use this skill to filter a pre-fetched set of Hacker News stories down to those that report supply-chain security threats relevant to software developers — including malicious packages on npm or PyPI, compromised developer tooling, and attacks targeting source code repositories or CI/CD infrastructure. Reads stories from stories.json in the workspace, performs semantic analysis (fetching HN threads when the title alone is ambiguous), and writes the stories worth alerting on to findings.json.
development
Run hexora static analysis on a Python package repository to detect suspicious code patterns, then triage findings with deterministic rules and AI reasoning to produce a structured risk report section.
development
Inspect recent git history of a Python package repository for suspicious commits touching supply-chain-sensitive files, then triage findings with AI reasoning to produce a structured risk report section.
development
Scan a Python package repository for compiled/binary files using Fromager-style detection and malcontent YARA analysis, then triage findings with deterministic rules and AI reasoning to produce a structured risk report section.