helpers/skills/vllm-slack-summary/SKILL.md
Use this skill to generate slack summaries of vLLM CI SIG Slack channel activity for the RHAIIS midstream release team
npx skillsauth add opendatahub-io/ai-helpers vllm-slack-summaryInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Automates generating slack summaries of the vLLM CI SIG Slack channel for the Red Hat AI Inference Server (RHAIIS) team.
slackdump workspace add./scripts/generate_transcript.py # Last 7 days (default)
./scripts/generate_transcript.py --days 14 # Custom date range
./scripts/generate_transcript.py --output-dir out # Custom output directory
When summarizing the transcript, focus on:
The skill creates vllm_slack_summary/ containing:
vllm_slack_summary/
├── slack_export/ # Raw Slack export
├── transcript.md # Markdown transcript
└── slack_summary_YYYY-MM-DD_to_YYYY-MM-DD.md # Summary report
After generating the transcript, analyze it and create a summary with:
| Issue | Solution |
|-------|----------|
| slackdump not found | Ensure slackdump is in PATH: which slackdump |
| Authentication failed | Run slackdump workspace add |
| No messages found | Check date range; channel may have no messages in that period |
vllm_slack_summary/transcript.mdvllm_slack_summary/slack_summary_YYYY-MM-DD_to_YYYY-MM-DD.mdtools
Use this skill to filter a pre-fetched set of Hacker News stories down to those that report supply-chain security threats relevant to software developers — including malicious packages on npm or PyPI, compromised developer tooling, and attacks targeting source code repositories or CI/CD infrastructure. Reads stories from stories.json in the workspace, performs semantic analysis (fetching HN threads when the title alone is ambiguous), and writes the stories worth alerting on to findings.json.
development
Run hexora static analysis on a Python package repository to detect suspicious code patterns, then triage findings with deterministic rules and AI reasoning to produce a structured risk report section.
development
Inspect recent git history of a Python package repository for suspicious commits touching supply-chain-sensitive files, then triage findings with AI reasoning to produce a structured risk report section.
development
Scan a Python package repository for compiled/binary files using Fromager-style detection and malcontent YARA analysis, then triage findings with deterministic rules and AI reasoning to produce a structured risk report section.