Prefect
Modern workflow orchestration — turn any Python function into a scheduled, observable, retriable data or AI pipeline with zero boilerplate.
Prefect
Prefect is the modern open-source workflow orchestration platform. Decorate any Python function as a @flow or @task, and Prefect handles scheduling, retries, observability, logging, and deployment — with a beautiful UI and cloud hosting option.
Key features
- Pythonic API —
@flowand@taskdecorators require zero schema changes to existing code - Automatic retries — configure retry counts and wait strategies per task
- Scheduling — cron, interval, or event-driven triggers
- Prefect UI — real-time flow run dashboard with logs, state history, and artifact tracking
- Deployments — package flows and deploy to Prefect Cloud, Kubernetes, ECS, or local agents
- Integrations — 100+ task libraries for AWS, GCP, dbt, Snowflake, Slack, and more
Quick start
npx ai-supply add prefect-workflow-orchestration
# Or install directly
pip install prefect
from prefect import flow, task
@task(retries=3)
def fetch_data(url: str) -> dict:
import httpx
return httpx.get(url).json()
@task
def process(data: dict) -> str:
return f"Got {len(data)} keys"
@flow(log_prints=True)
def my_pipeline(url: str):
data = fetch_data(url)
result = process(data)
print(result)
if __name__ == "__main__":
my_pipeline("https://api.github.com")
# Deploy and schedule
prefect deploy --name my-pipeline --cron "0 * * * *"
Curated mirror of the open-source Prefect project (Apache-2.0). Install upstream from the repository.
Compromise signals — malicious or tampered code (leaked secrets, backdoors, a dropped executable) — reduce the score, and known dependency CVEs carry a bounded penalty (they warrant review but never QUARANTINE — update the dependency to clear). Other dangerous-by-capability traits are risk surface, expected for some capabilities. Every finding is mapped to its OWASP control below.
Findings mapped to the OWASP Top 10 for LLM Applications (2025) and the OWASP Machine Learning Security Top 10. Expand any flagged control for the exact findings — compromise reduces the score; expected/risk-surface do not, except a known CVE, which carries a small bounded penalty (high/critical → Review).
The same gate an agent runs before installing (POST /api/v1/trust/prefect-workflow-orchestration/check). Click a policy:
Consume Prefect programmatically. Authenticate with an API key or session — see Authorize an agent.
# Agents: CHECK BEFORE YOU INSTALL (no auth) — score, grade, level, capability manifest
curl https://ai-supply.store/api/v1/trust/prefect-workflow-orchestration
# Gate against your org policy (returns { pass, violations })
curl -X POST https://ai-supply.store/api/v1/trust/prefect-workflow-orchestration/check \
-H "Content-Type: application/json" \
-d '{"minGrade":"B","denyPermissions":["shell"],"denyUnknownEgress":true}'
# CLI
npx ai-supply add prefect-workflow-orchestration
# REST (install → download)
curl -X POST https://ai-supply.store/api/v1/listings/prefect-workflow-orchestration/install \
-H "Authorization: Bearer $AIM_KEY"
# MCP tool
install_listing({ "slug": "prefect-workflow-orchestration" })OpenAPI spec →Curated mirror — latest upstream source. See the repository for tagged releases.