Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add BuildrAI/Buildr --skill nacos-connectiongit clone --depth 1 https://github.com/BuildrAI/BuildrWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/buildrai/buildr/nacos-connection)<a href="https://agentmods.dev/skills/buildrai/buildr/nacos-connection"><img src="https://agentmods.dev/badge/skills/buildrai/buildr/nacos-connection/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/buildrai/buildr/nacos-connection"><img src="https://agentmods.dev/badge/skills/buildrai/buildr/nacos-connection.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00042 | $0.00994 |
| Opus 5.5 | $0.00017 | $0.00398 |
| Sonnet 5.5 | $0.00008 | $0.00199 |
| Haiku 4.5 | $0.00004 | $0.00099 |
Grade A, and why
nacos-connection scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
使用 Nacos 连接
本技能（Skill）与连接声明、自带专业程序共同交付。程序使用 Buildr 的 Node.js 运行基线，无需另装网络库；技能（Skill）已投射不代表实例已配置或远端能力已验证。
先从 buildr connection-skill --help 发现当前通用入口，明确选择实例及其绑定来源。通过实例发现得到的本技能（Skill）和程序帮助继续工作，不能按系统名称、环境或类别猜测另一实现。不按同名接管另一实例，不从已退役存储借用认证。
专业程序为 scripts/nacos-client.mjs。帮助和版本不需要认证；实际操作通过 Buildr 通用启动入口注入私有连接上下文，不能直接把用户名、密码放入命令参数、环境变量或提示词（Prompt）。团队认证由团队实例文件管理；本机个人认证整组覆盖，个人组失效不会回退团队。
当前专业程序版本为 2.0.0，连接配置版本为 2。apiBaseUrl 是明确的实际接口及认证目标，必须包含准确端口与根路径；consoleUrl 只作为可选人工网站入口。两者可以分别部署，不猜端口、不自动补 /nacos。原配置版本 1 保留为不兼容事实，只有核对新接口目标并明确更新配置和认证后才继续，不将旧网站地址隐式迁移。
读取、比较、发布前按需要阅读专业命令与结果。程序支持有界命名空间（Namespace）发现、分页、完整原文文件、候选与显式双实例比较，以及现有配置发布；不创建新配置、不删除配置、不自动重启服务（Service）。原网站入口继续承担人工查看。
用户按服务（Service）询问配置时，先读从代码定位服务配置：从准确代码库、目标环境及加载声明确定完整 Nacos 位置，再匹配已保存连接并查询。不要按服务名称猜配置编号（dataId），不要把环境名称等同于配置档案（Profile）；不要求先建立服务绑定模块。
需要接续准确标识、授权范围或默认原文位置时，为专业命令显式指定 --result-file <本机新文件>。该文件在网络操作前以 0600 权限独占创建，保存未被展示处理改写的完整 JSON；普通输出的 displayOnly: true 表示只用于展示，不从中复制授权范围或路径继续执行。get 也可显式指定已知 --output-file 接收原文。
发布必须使用当前实例观察版本及已读取 MD5。先取得完整原文、形成候选并比较，从私有结果读取准确授权范围；生产标识默认 true，生产每次实际发布要展示具体目标及差异，取得本次用户授权并提交匹配依据。永久开关、任务（Task）实施授权、团队账号或认证成功不代替本次生产发布授权。程序检查依据的一致性与一次尝试使用事实，不能独立鉴别人类身份。第三版接口（API v3）正文详情没有完整旧管理字段，发布另读明确的完整管理兼容路线；该路线不可用时只拒绝发布，正常读取继续可用。兼容依据见接口与管理信息保全。
遇到冲突重新读取并判断；超时、连接中断或未知响应先调查真实配置，不重复提交。分别核对发布受理、正文与格式及元数据（Metadata）回读、服务（Service）加载和业务结果；程序的 published / verified 不代表服务（Service）或业务已生效。本机结果保存失败也不撤销已成立的发布事实，应按 published、未知结果及 privateResultError 调查，不能因此重发。
程序及其本机状态不承载公司预置地址或真实认证。运行约定与本机通道见上下文协议，只在适配执行入口或诊断本机通道时读取。
What ships with it
13 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- assets/connection.yml 2.5 KB
- references/api-compatibility.md 3.3 KB
- references/commands-and-results.md 5.9 KB
- references/context-protocol.md 3.2 KB
- references/service-config-discovery.md 4.6 KB
- scripts/lib/configuration.mjs 4.0 KB runs code
- scripts/lib/context.mjs 3.4 KB runs code
- scripts/lib/errors.mjs 645 B runs code
- scripts/lib/http.mjs 11 KB runs code
- scripts/lib/operations.mjs 18 KB runs code
- scripts/lib/output.mjs 3.0 KB runs code
- scripts/lib/workflow.mjs 13 KB runs code
- scripts/nacos-client.mjs 9.5 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 28 lines · 42 tokens per session scan A f7692a019f69
nacos-connection is a skill published in the GitHub repository BuildrAI/Buildr (28 stars, last pushed yesterday), licensed MIT. It adds 42 tokens to every session and 994 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-16.
Other skills, from other repositories
local-ai-agents
Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.
next-cache-components-adoption
Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…
chronicle
Analyze Copilot session history for standup reports, usage tips, session search, and session reindexing. Use when the user asks for a standup, daily summary, usage tips, workflow recommendations, wants to search or find past sessions by keyword/file/PR, wants to reindex their session store, or asks about deleting…
chat-pet-sprite-creation
Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.
component-fixtures
Use when creating or updating component fixtures for screenshot testing or their shared infrastructure, or when designing UI components to be fixture-friendly. Covers fixture file structure, theming, service setup, CSS scoping, async rendering, validation, and common pitfalls.