Skip to content
Back to skills

Superduper

ASecurity

"Use Superduper to build database-integrated AI applications,

  • 247 stars
  • 0 votes
  • 0 copies
  • 3 views
  • Added September 9, 2026
ai-agentspythongobashsqlapidatabasebackend

Works with

  • cli
  • api

Security analysis

A96/100
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro scans all 20 files and shows the line behind each finding

Scanned September 9, 2026

npx -y skills add VectorSpaceLab/AREX-Skill --skill superduper --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Superduper?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Superduper
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/vectorspacelab-superduper/badge)](https://www.skillsdirectory.com/skills/vectorspacelab-superduper)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: superduper
description: "Use Superduper to build database-integrated AI applications,
  component workflows, listeners, vector indexes, and first-party plugin
  integrations."
disable-model-invocation: true
metadata:
  disco-role: operating
license: Apache 2.0
---

# Superduper

Use this repo skill when a task names Superduper, `superduper-framework`, or APIs such as `superduper(...)`, `Datalayer`, `ObjectModel`, `Listener`, `VectorIndex`, first-party `superduper_*` plugins, database-integrated AI apps, RAG-style component graphs, or vector search over backend records.

## Before using this skill

- Install the base package with Python 3.10+:

  ```bash
  python -m pip install superduper-framework
  ```

- Install at least one data-backend plugin for real `Datalayer` work. For a no-service local smoke, install the MongoDB plugin and use `mongomock://...`:

  ```bash
  python -m pip install superduper_mongodb
  python - <<'PY'
  from superduper import superduper
  db = superduper("mongomock://skill-smoke", initialize_cluster=False, force_apply=True)
  print(type(db).__name__)
  PY
  ```

- Do not rely on the `superduper` console command for this source snapshot. The package metadata declares a console script, but this version lacks `superduper.__main__`; use the Python API and bundled helper scripts instead.

## Route by task

| Task or signal | Read |
| --- | --- |
| Connection strings, config files, `SUPERDUPER_*` env vars, backend URI mapping, `Datalayer`, `Document`, `Schema`, `Table`, query operations, or safe scratch DB checks | [datalayer-and-config](sub-skills/datalayer-and-config/SKILL.md) |
| `Component`, `ObjectModel`, custom callable models, `Listener`, `Dataset`, `Metric`, `Validation`, `Trainer`, `Application`, cron/Streamlit components, or RAG-like workflow composition | [components-and-workflows](sub-skills/components-and-workflows/SKILL.md) |
| Embedding listeners, `VectorIndex`, vector datatypes, `table.like(..., vector_index=...)`, compatible query listeners, local vector search, nearest-neighbor troubleshooting | [vector-search-and-retrieval](sub-skills/vector-search-and-retrieval/SKILL.md) |
| Choosing/installing/importing `superduper_*` plugins for MongoDB, SQL, Snowflake, Redis, vector DBs, OpenAI/Anthropic/Cohere/Jina, Pillow, sklearn, Torch, Transformers, vLLM, or custom plugins | [plugins-and-integrations](sub-skills/plugins-and-integrations/SKILL.md) |

## Shared references and scripts

- Read [references/api-overview.md](references/api-overview.md) for the public import surface, verified signatures, backend URI map, and where each API family is covered.
- Read [references/troubleshooting.md](references/troubleshooting.md) for cross-cutting install/import/plugin/backend/CLI/config failures.
- Read [references/repo-provenance.md](references/repo-provenance.md) before deciding whether this skill is current for a checkout or package version.
- Run [scripts/check_superduper_env.py](scripts/check_superduper_env.py) for a safe import/version/plugin/CLI diagnostic that does not open network connections or install packages.

## Operating rules

1. Prefer Python API snippets over CLI commands for this repo snapshot.
2. Choose the minimum plugin for the user's backend or model provider; do not install every plugin unless the user explicitly asks for broad optional coverage.
3. Treat cloud/API/vector DB/LLM/GPU plugin paths as optional until credentials, services, model weights, and hardware are explicitly available.
4. Use scratch `mongomock://...` or other user-approved test URIs for destructive checks. Never call `db.drop(force=True, data=True)` against user or production data.
5. If a task combines routes, start with setup (`datalayer-and-config`), then component/model wiring (`components-and-workflows`), then retrieval (`vector-search-and-retrieval`), and finally provider/backend-specific plugin details (`plugins-and-integrations`).

Files in this skill

  • SKILL.md3.8 KB
  • references/api-overview.md5.5 KB
  • references/repo-provenance.md3.2 KB
  • references/repo-routing-metadata.json498 B
  • references/troubleshooting.md3.7 KB
  • scripts/check_superduper_env.py6.9 KB
  • sub-skills/components-and-workflows/SKILL.md3.2 KB
  • sub-skills/components-and-workflows/references/components-models-listeners.md9.8 KB
  • sub-skills/components-and-workflows/references/troubleshooting.md8.3 KB
  • sub-skills/components-and-workflows/references/workflows.md9.1 KB
  • sub-skills/components-and-workflows/scripts/superduper_component_smoke.py6.8 KB
  • sub-skills/datalayer-and-config/SKILL.md3.2 KB
  • sub-skills/datalayer-and-config/references/configuration-and-datalayer.md9.7 KB
  • sub-skills/datalayer-and-config/references/query-and-data-model.md5.3 KB
  • sub-skills/datalayer-and-config/references/troubleshooting.md4.5 KB
  • sub-skills/datalayer-and-config/scripts/superduper_datalayer_smoke.py6.2 KB
  • sub-skills/plugins-and-integrations/SKILL.md3 KB
  • sub-skills/plugins-and-integrations/references/plugin-catalog.md9.8 KB
  • sub-skills/plugins-and-integrations/references/plugin-installation.md8.4 KB
  • sub-skills/plugins-and-integrations/references/troubleshooting.md8.7 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.