Skip to content
Back to skills

474 Installation 9414b478

DSecurity

``` requirements.txt → Core dependencies only (2 packages) requirements-dev.txt → Development + all providers + testing tools ```

  • 9 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 11, 2026
developmentpythonbashtestinggitapidocumentation

Works with

  • terminal
  • cli
  • api

Security analysis

D55/100
  • criticalPipes output to a shell interpreter
  • mediumUses curl or wget to download content
  • criticalExfiltrates credentials via HTTP — exact pattern from Snyk ToxicSkills study
  • criticalDownloads and executes remote scripts — classic supply chain attack
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro shows the line behind each finding and how to fix it

Scanned October 11, 2026

npx -y skills add tools-only/X-Skills --skill 474-installation_9414b478 --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of 474 Installation 9414b478?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for 474 Installation 9414b478
[![Security: D — Skills Directory](https://www.skillsdirectory.com/api/skills/tools-only-474-installation-9414b478/badge)](https://www.skillsdirectory.com/skills/tools-only-474-installation-9414b478)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

SKILL.md
# cascadeflow Installation Guide

## 📦 Files

```
requirements.txt       → Core dependencies only (2 packages)
requirements-dev.txt   → Development + all providers + testing tools
```

## 🎯 Installation Options

### Production Users

```bash
# Minimal install (just core)
pip install cascadeflow

# With specific provider
pip install cascadeflow[openai]
pip install cascadeflow[anthropic]

# With common providers (OpenAI + Anthropic + Groq)
pip install cascadeflow[providers]

# With everything
pip install cascadeflow[all]
```

### Developers/Contributors

```bash
# Method 1: Using requirements-dev.txt
pip install -r requirements-dev.txt

# Method 2: Using pyproject.toml extras (recommended)
pip install -e ".[dev]"
```

## 📊 What's Included

### requirements.txt (Core Only)
```
pydantic>=2.0.0      # Data validation
httpx>=0.25.0        # HTTP client
```

**That's it!** Just 2 core dependencies. Providers are optional extras.

### requirements-dev.txt (Everything)
```
Core dependencies       ✅
All provider SDKs       ✅ (openai, anthropic, groq, huggingface, together, vllm)
Testing tools           ✅ (pytest, pytest-asyncio, pytest-cov, pytest-mock)
Code quality tools      ✅ (black, ruff, mypy, isort, pre-commit)
Development utilities   ✅ (rich for terminal output)
```

## 🆓 Free/Local Providers

### Ollama (Recommended for Development)
```bash
# No Python package needed!

# 1. Install Ollama from https://ollama.ai
curl -fsSL https://ollama.com/install.sh | sh

# 2. Pull a model
ollama pull llama3.2:1b

# 3. Use with cascadeflow
pip install cascadeflow  # Core only, no extras needed!
```

**Cost: $0/month** 💰

### vLLM
```bash
# Option 1: HTTP server (no Python package)
# Run vLLM server, connect via HTTP

# Option 2: Python package
pip install cascadeflow[vllm]
```

## 🔑 Provider Setup

### API Keys (.env file)
```bash
# Only add keys for providers you want to use

# OpenAI
OPENAI_API_KEY=sk-proj-...

# Anthropic
ANTHROPIC_API_KEY=sk-ant-...

# Groq (free tier available!)
GROQ_API_KEY=gsk_...

# HuggingFace
HF_TOKEN=hf_...

# Together.ai
TOGETHER_API_KEY=...

# Ollama - no API key needed! (local)
# vLLM - no API key needed! (local)
```

## 🚀 Quick Start

### For Production
```bash
# Install with common providers
pip install cascadeflow[providers]

# Set API keys in .env
echo "OPENAI_API_KEY=sk-..." >> .env
echo "ANTHROPIC_API_KEY=sk-ant-..." >> .env

# Start using
python your_app.py
```

### For Development
```bash
# Clone repo
git clone https://github.com/lemony-ai/cascadeflow.git
cd cascadeflow

# Create virtual environment
python -m venv .venv
source .venv/bin/activate  # Linux/Mac
# or: .venv\Scripts\activate  # Windows

# Install in dev mode
pip install -e ".[dev]"

# Run tests
pytest
```

## 🧪 Testing Without API Keys

Use Ollama for free local testing:

```bash
# Install Ollama
curl -fsSL https://ollama.com/install.sh | sh

# Pull a small model
ollama pull llama3.2:1b

# Install just core cascadeflow
pip install cascadeflow

# Test
python examples/multi_provider.py
```

## 📋 Dependencies Summary

| Package | Used By | Required? | Install Via |
|---------|---------|-----------|-------------|
| pydantic | Core validation | ✅ Always | requirements.txt |
| httpx | Core HTTP client | ✅ Always | requirements.txt |
| openai | OpenAIProvider | ❌ Optional | `[openai]` or `[providers]` or `[all]` |
| anthropic | AnthropicProvider | ❌ Optional | `[anthropic]` or `[providers]` or `[all]` |
| groq | GroqProvider | ❌ Optional | `[groq]` or `[providers]` or `[all]` |
| huggingface-hub | HuggingFaceProvider | ❌ Optional | `[huggingface]` or `[all]` |
| together | TogetherProvider | ❌ Optional | `[together]` or `[all]` |
| vllm | VLLMProvider | ❌ Optional | `[vllm]` or `[all]` |
| rich | Dev/Debug | ❌ Dev only | requirements-dev.txt |
| pytest | Testing | ❌ Dev only | requirements-dev.txt |
| black | Formatting | ❌ Dev only | requirements-dev.txt |
| ruff | Linting | ❌ Dev only | requirements-dev.txt |
| mypy | Type checking | ❌ Dev only | requirements-dev.txt |

## 💡 Best Practices

### For Production
1. **Start minimal**: `pip install cascadeflow`
2. **Add providers as needed**: `pip install cascadeflow[openai]`
3. **Use Ollama** for free local inference

### For Development
1. **Always use virtual environment**
2. **Install in editable mode**: `pip install -e ".[dev]"`
3. **Run tests** before committing: `pytest`
4. **Format code**: `black . && isort .`
5. **Check types**: `mypy cascadeflow/`

### For Testing
1. **Use Ollama** for free testing (no API costs!)
2. **Mock API calls** when testing without keys
3. **Use pytest fixtures** for provider initialization

## 🔧 Troubleshooting

### "No module named 'openai'"
```bash
# Install OpenAI extra
pip install cascadeflow[openai]
```

### "No module named 'anthropic'"
```bash
# Install Anthropic extra
pip install cascadeflow[anthropic]
```

### "Connection refused" with Ollama
```bash
# Make sure Ollama is running
ollama serve

# Check if running
curl http://localhost:11434/api/tags
```

### Version conflicts
```bash
# Create fresh virtual environment
python -m venv .venv
source .venv/bin/activate
pip install cascadeflow[providers]
```

### IDE shows missing dependencies
```bash
# Sync your IDE with virtual environment
# In PyCharm/IntelliJ: File → Project Structure → SDK
# Select .venv/bin/python

# Or reinstall
pip install -r requirements-dev.txt
```

## 🎯 Installation Examples by Use Case

### "I want to try cascadeflow with OpenAI"
```bash
pip install cascadeflow[openai]
```

### "I want OpenAI + Anthropic"
```bash
pip install cascadeflow[openai,anthropic]
# or
pip install cascadeflow[providers]
```

### "I want everything"
```bash
pip install cascadeflow[all]
```

### "I want free local models only"
```bash
pip install cascadeflow
# Then install Ollama from https://ollama.ai
```

### "I'm contributing to cascadeflow"
```bash
git clone https://github.com/lemony-ai/cascadeflow.git
cd cascadeflow
pip install -e ".[dev]"
pre-commit install
pytest
```

## ✅ Verification

Test your installation:

```bash
# Core
python -c "import cascadeflow; print('✅ Core OK')"

# OpenAI (if installed)
python -c "import openai; print('✅ OpenAI OK')"

# Anthropic (if installed)
python -c "import anthropic; print('✅ Anthropic OK')"

# Full test
python -c "
from cascadeflow import CascadeAgent, ModelConfig
print('✅ All imports working!')
"
```

## 📊 Provider Comparison

| Provider | Cost | Speed | Quality | Setup | API Key |
|----------|------|-------|---------|-------|---------|
| OpenAI | $$$ | Medium | High | Easy | Yes |
| Anthropic | $$$ | Medium | High | Easy | Yes |
| Groq | $ | Fast | Medium | Easy | Yes |
| Ollama | Free | Fast | Medium | Medium | No |
| vLLM | Free | Very Fast | Medium | Hard | No |

## 🔗 Links

- **pyproject.toml**: See all available extras
- **Documentation**: https://github.com/lemony-ai/cascadeflow
- **Repository**: https://github.com/lemony-ai/cascadeflow
- **Issues**: https://github.com/lemony-ai/cascadeflow/issues

## 📝 Notes

- **tiktoken removed**: Not used in current implementation
- **Ollama**: No Python package needed - uses HTTP directly
- **Core is minimal**: Only 2 dependencies for maximum flexibility

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.