overthinkos/jupyter-ml
ov-layers/skills/jupyter-ml/SKILL.md
Full CUDA ML stack + JupyterLab with real-time collaboration and CRDT MCP server on port 8888. Use when working with GPU-accelerated Jupyter notebooks, ML training with collaboration, or the jupyter-ml layer.
tools
Updated Apr 24, 2026
$ install --global
skillsauthnpx skillsauth add overthinkos/overthink-plugins jupyter-mlInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 24, 2026, 2:51 PM165.4s1 file scanned
SKILL.md
- name:
- jupyter-ml
- description:
- |
jupyter-ml -- Full ML + JupyterLab with CRDT MCP
Layer Properties
| Property | Value |
|----------|-------|
| Dependencies | cuda, supervisord |
| Sub-layers | llama-cpp, unsloth, jupyter-mcp |
| Ports | 8888 |
| Service | jupyter-ml (supervisord) |
| Volume | workspace at ~/workspace |
| Install files | layer.yml, pixi.toml, tasks: |
Architecture: Environment-Owning Meta-Layer
This is a Tier 2 "environment owner" layer that:
- Owns the pixi.toml with ALL Python dependencies (Jupyter + ML + vLLM runtime deps)
- Composes three Tier 1 sub-layers via
layers: [llama-cpp, unsloth, jupyter-mcp] - MCP extension installed by the
jupyter-mcpsub-layer (not directly in tasks:)
Build order: pixi environment → llama-cpp (binaries) → unsloth (vllm wheel + unsloth pip + patch) → jupyter-mcp (MCP extension)
Key Packages
conda-forge: JupyterLab >= 4.4.0, jupyter-resource-usage, jupyterlab-git, jupyterlab-lsp, jupyterlab-spellchecker, tensorboard, wandb, matplotlib, seaborn, pandas, numpy, scikit-learn, scipy, polars, pyarrow, dask, duckdb, altair, papermill, marimo, mkdocs, black, pytest
PyPI (ML Core): PyTorch >= 2.10.0 (CUDA 13.0), xformers, transformers >= 5.0.0rc1, accelerate, einops, kornia, spandrel, torchsde
PyPI (vLLM Runtime): blake3, flashinfer-python, numba, ray, xgrammar, and 25+ more runtime deps
PyPI (Fine-tuning): peft, trl, bitsandbytes, deepspeed, liger-kernel
PyPI (LangChain): langchain, langchain-core, langchain-openai, langchain-community, langchain-classic, langchain-anthropic, langchain-huggingface, langchain-ollama, chromadb, faiss-cpu
PyPI (Evaluation): evidently (with llm extras), evaluate, sacrebleu, rouge-score, nltk, bertviz
PyPI (APIs): openai, anthropic, gradio, ollama (client)
PyPI (Collaboration): jupyter-collaboration >= 4.1.0
RPM: git, gcc, gcc-c++
Environment
| Variable | Value | Purpose |
|----------|-------|---------|
| NVIDIA_PYTHON_PROJECT | ~/.pixi | NVIDIA driver → pixi env mapping |
| LD_LIBRARY_PATH | /usr/lib64:$HOME/llama.cpp | CUDA libs + llama.cpp shared libs |
| LLAMA_CPP_PATH | ~/llama.cpp | (from llama-cpp sub-layer) |
| UNSLOTH_SKIP_LLAMA_CPP_INSTALL | 1 | (from unsloth sub-layer) |
| HF_HOME | ~/.cache/huggingface | (from unsloth sub-layer) |
MCP Server Extension
Same CRDT MCP server as /ov-layers:jupyter — 13 tools for programmatic notebook access (list, get, create, update, insert, delete, execute cells, watch changes, collaboration awareness). See /ov-layers:jupyter for full tool reference.
Endpoint: http://localhost:8888/mcp (Streamable HTTP, MCP spec 2025-11-25)
Comparison
| | jupyter | jupyter-ml | |---|---|---| | Base dep | supervisord | cuda, supervisord | | GPU | No | CUDA 13.0 | | Platforms | amd64 + arm64 | amd64 only | | MCP | CRDT (13 tools) | CRDT (13 tools) | | ML stack | No | Full (PyTorch, vLLM 0.19, unsloth) | | Volume | workspace | workspace |
Used In Images
/ov-images:jupyter-ml/ov-images:jupyter-ml-notebook
Related Layers
/ov-layers:jupyter— Lightweight variant (no CUDA, multi-arch)/ov-layers:llama-cpp— Sub-layer: llama.cpp binaries/ov-layers:unsloth— Sub-layer: vLLM wheel + fine-tuning + vLLM patch/ov-layers:jupyter-mcp— Sub-layer: CRDT MCP extension/ov-layers:notebook-templates— Starter notebooks (data layer, used alongside this layer in images)
When to Use This Skill
Use when the user asks about:
- GPU-accelerated Jupyter with collaboration
- ML training notebooks with CRDT MCP
- The
jupyter-mllayer - Combining jupyter features with CUDA ML
Related
/ov:layer— layer authoring reference (layer.ymlschema, task verbs, service declarations)/ov:test— declarative testing (tests:block,ov image test,ov test)
Related Skills
overthinkos/plugin
tools
VerifiedTrustedCommunity
Use when authoring or modifying a charly PLUGIN — a candy with a `plugin:` block that contributes Providers (verbs/kinds/deploy-targets/steps/builders/commands), its own CUE schema, builtin (compiled-in) or external (out-of-tree git repo). Covers the unified Provider model, the per-plugin CUE-schema contract (single source → Go params for dev + schema-over-Describe RPC for runtime), the SDK, and the loader.
SKILL.mdUpdated Jun 22, 2026
overthinkos/cue
tools
VerifiedTrustedCommunity
The CUE data-validation / configuration CLI (cue), pinned to v0.16.1. Use when working with the cue candy, installing the cue binary into a box or onto a target:local dev host, or running the offline schema-vendoring pipeline that feeds charly's egress validation.
SKILL.mdUpdated Jun 16, 2026
overthinkos/egress
tools
VerifiedTrustedCommunity
CUE EGRESS validation — validating (and, where it adds value, generating) the config files charly WRITES to a system BEFORE the bytes hit disk. MUST be invoked before working on charly/egress.go, the vendored schemas under candy/plugin-egress/egress-schemas/vendor/, the ValidateEgress / registerVendoredEgressKind path, the offline `task cue:vendor` pipeline, or adding an egress schema for any written artifact (cloud-init, k8s manifests, traefik routes, runtime config, install ledger, systemd/quadlet units, ssh_config, libvirt XML).
SKILL.mdUpdated Jun 16, 2026
overthinkos/check-k8s
tools
VerifiedTrustedCommunity
Kubernetes cluster-probe declarative check verb — the `kube:` check verb (nodes, pods, ingress, storage class, addon health, apply/delete, and arbitrary resource GETs) served out-of-process by the candy/plugin-kube plugin (vendored client-go; no external kubectl required).
SKILL.mdUpdated Jun 14, 2026