Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/anhermon/spark-ordernet-mcpnpx agentmods add skills/anhermon/spark-ordernet-mcp/spark-ordernetWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/anhermon/spark-ordernet-mcp/spark-ordernet)<a href="https://agentmods.dev/skills/anhermon/spark-ordernet-mcp/spark-ordernet"><img src="https://agentmods.dev/badge/skills/anhermon/spark-ordernet-mcp/spark-ordernet/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/anhermon/spark-ordernet-mcp/spark-ordernet"><img src="https://agentmods.dev/badge/skills/anhermon/spark-ordernet-mcp/spark-ordernet.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00089 | $0.00875 |
| Opus 5 | $0.00044 | $0.00438 |
| Sonnet 5 | $0.00018 | $0.00175 |
| Haiku 4.5 | $0.00009 | $0.00088 |
Grade A, and why
spark-ordernet scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 59 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Spark Ordernet
Use the Spark MCP tools to retrieve account evidence. Keep every operation read-only.
Workflow
- Call
accountsbefore an account-scoped task. - If more than one account exists and the user did not identify one, show the account names/numbers and ask which one to use.
- Call the narrowest tool that answers the request. See tool-reference.md for selection and parameters.
- Preserve currencies, units, timestamps, signs, and raw field names. Do not infer a unit or translate an unclear compressed-domain field without evidence.
- Separate retrieved facts from calculations or investment interpretation. State the requested date/range and whether the result is a current snapshot or history.
- Treat an empty list as “no matching records returned,” not proof that no activity ever existed. Mention the account and range checked.
Private visual report
When asked for a visual portfolio analysis in this project, run:
uv run --env-file .env python scripts/generate_portfolio_report.py
The generator calls Spark through MCP stdio, masks the account identifier, writes the ignored reports/portfolio-analysis.html atomically, and sets it to mode 0600. It stores reusable API snapshots in the ignored reports/.spark-cache/ directory with mode 0700; cache files are mode 0600.
Reuse the default cache for normal reports. Completed historical years load locally, and current snapshots are reused for five minutes before refreshing from Spark. Use --cache-ttl 0 when the user needs a guaranteed live refresh of current data, --refresh only when historical broker data may have changed, and --offline to reproduce the last successful report without contacting Spark. The page labels live, cached, offline, or fallback data.
For historical position analysis, use resolve_securities for exact bulk label
resolution and price_history only with its returned topic keys. The report
normalizes income and fees to ILS using transaction-date FX, keeps missing
conversions explicit, separates table fields by type, and indexes held-period
price lines from each lifecycle's first available close.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 59 lines · 89 tokens per session scan A f34f487f8f25
spark-ordernet is a skill published in the GitHub repository anhermon/spark-ordernet-mcp (1 stars, last pushed 1mo ago), licensed MIT. It adds 89 tokens to every session and 875 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
okx-cex-portfolio
This skill should be used when the user asks about 'account balance', 'how much USDT do I have', 'my funding account', 'show my positions', 'open positions', 'position P&L', 'unrealized PnL', 'closed positions', 'position history', 'realized PnL', 'account bills', 'transaction history', 'trading fees', 'fee tier'…
agoragentic-transaction-assurance
Prepare, evaluate, and reconcile autonomous agent transactions without self-granting payment or owner authority. Use when an agent must bind principal authority, seller terms, payment evidence, execution, delivered outcome, and reconciliation; handle paid retries safely; or prepare an authority request for owner…
stripe
Query and manage Stripe resources (customers, payments, subscriptions). Reads from apps/website/.env. Write operations blocked on live keys.
recurrent-payment
A recurring-payment workflow for T-Kassa, a payment service. It links a customer's card during an initial payment and later charges that saved payment authorisation for a subscription.
refund-payment
A payment procedure for refunding a completed T-Kassa payment or cancelling a payment that is still on hold. T-Kassa is a payment service, and the procedure can also send the required closing receipt.
reconcile-day
Reconcile a day of MercadoPago activity — payments by status plus merchant orders.