Skip to content
Back to skills

2375 2026 02 09 11 28 57 Dev Install Tinyagent Setup 88a5ba22

ASecurity

**Date:** 2026-02-09 **Owner:** claude **Phase:** Research **last_updated:** 2026-02-09 **last_updated_by:** claude **git_commit:** 3f8dea1a **git_branch:** master **tags:** [installation, tiny-agent-os, dependencies, pyproject]

  • 9 stars
  • 0 votes
  • 0 copies
  • 3 views
  • Added October 11, 2026
developmentpythonrustgogit

Works with

  • cli

Security analysis

A92/100
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro shows the line behind each finding and how to fix it

Scanned October 11, 2026

npx -y skills add tools-only/X-Skills --skill 2375-2026-02-09_11-28-57_dev_install_tinyagent_setup_88a5ba22 --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of 2375 2026 02 09 11 28 57 Dev Install Tinyagent Setup 88a5ba22?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for 2375 2026 02 09 11 28 57 Dev Install Tinyagent Setup 88a5ba22
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/tools-only-2375-2026-02-09-11-28-57-dev-install-tinyagent-set/badge)](https://www.skillsdirectory.com/skills/tools-only-2375-2026-02-09-11-28-57-dev-install-tinyagent-set)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

SKILL.md
# Research – Dev Install Script tiny-agent-os PyPI Package Setup

**Date:** 2026-02-09
**Owner:** claude
**Phase:** Research
**last_updated:** 2026-02-09
**last_updated_by:** claude
**git_commit:** 3f8dea1a
**git_branch:** master
**tags:** [installation, tiny-agent-os, dependencies, pyproject]

## Goal

Verify that the development install scripts are properly configured to use the PyPI-packaged version of `tiny-agent-os` v1.1.0 (Rust bindings) instead of any local build configuration.

## Findings

### Core Dependency Configuration
- **File:** `pyproject.toml:31`
- **Status:** ✅ Correctly configured
- **Dependency:** `"tiny-agent-os==1.1.0"`
- **Note:** Lines 89-90 explicitly state no repo-local override is used

```
# NOTE: tinyagent is now provided by the PyPI distribution `tiny-agent-os`.
# We intentionally do not use a repo-local override.
```

### Developer Setup Script
- **File:** `scripts/dev-setup.sh`
- **Command:** `uv sync --extra dev`
- **Status:** ✅ Ready to use PyPI package
- **Verification:** Script validates package import after install

### End-User Installer
- **File:** `scripts/install_linux.sh`
- **Commands:**
  - Line 452: `uv pip install --python "$VENV_DIR/bin/python" tunacode-cli`
  - Line 455: `"$VENV_DIR/bin/pip" install tunacode-cli`
- **Status:** ✅ Will pull `tiny-agent-os` as transitive dependency

### Installed Package Verification
- **Location:** `.venv/lib/python3.13/site-packages/tinyagent/`
- **Rust binary:** `_alchemy.abi3.so` (9.4 MB ELF 64-bit shared object)
- **Import path:** `import tinyagent` (module name differs from package name)
- **Version:** 1.1.0 confirmed via `get_tinyagent_version()`

## Key Patterns / Solutions Found

### Package Name vs Module Name
- **PyPI package:** `tiny-agent-os`
- **Python import:** `import tinyagent`
- This is correctly reflected in `src/tunacode/core/tinyagent/__init__.py` which imports `tinyagent` directly

### No Local Override Required
The codebase has no local tinyagent build configuration. The dependency flows:
```
pip install tunacode-cli → installs tiny-agent-os v1.1.0 → provides tinyagent module
```

### Developer vs End-User Installation
| User Type | Command | Dependency Source |
|-----------|---------|-------------------|
| Developer | `make dev-setup` or `uv sync --extra dev` | PyPI via uv.lock |
| End-user | `scripts/install_linux.sh` | PyPI via pip/uv |

## Knowledge Gaps

- None identified for installation flow

## References

- `pyproject.toml` - Dependency declaration
- `scripts/dev-setup.sh` - Developer environment setup
- `scripts/install_linux.sh` - End-user production installer
- `src/tunacode/core/tinyagent/__init__.py` - tinyagent integration scaffolding

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.