Skip to content
Back to skills

Xinference

ASecurity

"Use Xinference for local and distributed model serving, Python

  • 247 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added September 9, 2026
devopspythongobashdockerkubernetesapifrontendbackendsecurity

Works with

  • cli
  • api

Security analysis

A92/100
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro scans all 20 files and shows the line behind each finding

Scanned September 9, 2026

npx -y skills add VectorSpaceLab/AREX-Skill --skill xinference --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Xinference?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Xinference
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/vectorspacelab-xinference/badge)](https://www.skillsdirectory.com/skills/vectorspacelab-xinference)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: xinference
description: "Use Xinference for local and distributed model serving, Python
  clients, OpenAI-compatible APIs, model backend selection, and production
  operations."
disable-model-invocation: true
metadata:
  disco-role: operating
license: Apache 2.0
---

# Xinference

Use this repo skill when a task involves self-hosting, operating, or integrating
Xinference / Xorbits Inference as a model-serving package. It covers the public
CLI, local and distributed service patterns, Python clients, OpenAI-compatible
HTTP APIs, model family registration, optional runtime backends, and operator
configuration.

## First checks

1. Confirm the installed package and console entry points:

   ```bash
   python scripts/check_xinference_install.py --run-cli-help
   ```

2. Inspect public client signatures and entry points when a task depends on API
   arguments or when a checkout may have changed:

   ```bash
   python scripts/inspect_xinference_interfaces.py
   ```

3. Read `references/repo-provenance.md` before deciding whether this skill is
   current for a different checkout or release.

## Route by task

| Task shape | Read next |
| --- | --- |
| Start `xinference-local`, build `xinference launch` commands, stop/list/cache/register models, or plan supervisor/worker clusters | `sub-skills/serving-and-cli/SKILL.md` |
| Use `Client`, `AsyncClient`, cURL, OpenAI SDK base URLs, streaming, embeddings, rerank, image/audio/video requests, or request-shape troubleshooting | `sub-skills/client-and-api/SKILL.md` |
| Choose a model family/backend/extra, validate custom model JSON, reason about LoRA, virtual environments, model format, quantization, or memory estimates | `sub-skills/models-and-backends/SKILL.md` |
| Configure auth, API keys, OIDC, audit, metrics, logging, persistence, frontend static serving, Docker/Kubernetes, IP restrictions, or deployment hardening | `sub-skills/operations-and-security/SKILL.md` |
| Diagnose install/import failures, editable source builds, optional dependency conflicts, frontend build surprises, or cross-cutting package errors | `references/troubleshooting.md` and `references/installation-and-environment.md` |

## Install and environment rules

- Supported Python range is `>=3.10`; match the project’s current packaging
  constraints before selecting an interpreter.
- Basic install uses `pip install xinference`. Select optional extras only for
  the model families/backends actually needed by the task; do not install `all`
  or every backend as a first response.
- In editable source checkouts, set `NO_WEB_UI=1` when you only need Python
  package inspection or backend-free tests and do not want the Web UI build.
- Real model launch may download weights, create per-model virtual environments,
  need extra packages, and require CPU/GPU/MPS/vendor hardware. Treat install
  and import success as a package-surface check, not proof that every model
  backend runs.
- Keep endpoint roles distinct: the Xinference service endpoint is usually the
  root URL, while OpenAI-compatible clients use the same service plus `/v1`.

## Bundled root references

- `references/installation-and-environment.md` explains install variants,
  optional extras, source-build behavior, and safe package checks.
- `references/troubleshooting.md` covers cross-cutting package, dependency,
  cache, frontend, auth-header, and model-download symptoms.
- `references/repo-provenance.md` records the source snapshot and refresh
  baseline.
- `references/repo-routing-metadata.json` is structured metadata for managed
  `repo-skills-router` import; do not edit router Markdown by hand.

## Bundled root scripts

- `scripts/check_xinference_install.py` checks importability, distribution
  metadata, client aliases, and console entry point availability without
  starting services.
- `scripts/inspect_xinference_interfaces.py` prints verified public signatures
  for clients, model handles, and selected API helpers.

## Safety and non-goals

- This skill is self-contained. Do not require future agents to open original
  repo docs, tests, examples, scripts, or checkout paths.
- Do not claim that vLLM, SGLang, MLX, image, audio, video, or real model
  inference was verified unless a later verification run actually exercised
  that backend and model.
- Do not print or store real API keys, JWT secrets, encryption keys, OIDC
  client secrets, or model-hub tokens in examples or generated commands.
- Use placeholders for hosts, ports, model UIDs, model names, paths, API keys,
  and worker addresses until the user provides deployment-specific values.
- For repository editing or CI development tasks, use the project’s maintainer
  guidance separately; this operating skill is for package/service use by a
  later Researcher.

Files in this skill

  • SKILL.md4.7 KB
  • references/installation-and-environment.md4.7 KB
  • references/repo-provenance.md2.2 KB
  • references/repo-routing-metadata.json420 B
  • references/troubleshooting.md5 KB
  • scripts/check_xinference_install.py3.7 KB
  • scripts/inspect_xinference_interfaces.py4 KB
  • sub-skills/client-and-api/SKILL.md3.5 KB
  • sub-skills/client-and-api/references/api-reference.md6.4 KB
  • sub-skills/client-and-api/references/client-workflows.md4.2 KB
  • sub-skills/client-and-api/references/openai-compatible-api.md4.8 KB
  • sub-skills/client-and-api/references/troubleshooting.md2.9 KB
  • sub-skills/client-and-api/scripts/make_openai_client_snippets.py6.8 KB
  • sub-skills/models-and-backends/SKILL.md3.5 KB
  • sub-skills/models-and-backends/references/backend-compatibility.md4.1 KB
  • sub-skills/models-and-backends/references/custom-models.md4.5 KB
  • sub-skills/models-and-backends/references/model-overview.md2.3 KB
  • sub-skills/models-and-backends/references/troubleshooting.md2.1 KB
  • sub-skills/models-and-backends/references/virtual-envs-and-lora.md1.8 KB
  • sub-skills/models-and-backends/scripts/check_model_config.py23.2 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…