Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add coracoo/zspace_skill --skill nas-setupgit clone --depth 1 https://github.com/coracoo/zspace_skillWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/coracoo/zspace_skill/nas-setup)<a href="https://agentmods.dev/skills/coracoo/zspace_skill/nas-setup"><img src="https://agentmods.dev/badge/skills/coracoo/zspace_skill/nas-setup/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/coracoo/zspace_skill/nas-setup"><img src="https://agentmods.dev/badge/skills/coracoo/zspace_skill/nas-setup.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00125 | $0.00891 |
| Opus 5.5 | $0.00050 | $0.00356 |
| Sonnet 5.5 | $0.00025 | $0.00178 |
| Haiku 4.5 | $0.00013 | $0.00089 |
Grade A, and why
nas-setup scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
NAS Setup — 环境检查 & 登录验证
概述
在任何 NAS 操作之前,必须先跑这个前置检查。它验证:
.env是否配置完整- NAS 能否登录(鉴权链是否通)
- device_id 是否有效(N001414 短信验证绕过了吗)
- RAG daemon 是否在线(需要 RAG 的 skill 才检查)
工作流
前置检查(每次被触发时执行)
方式 1(推荐): exec 自动化脚本,一次性输出全部结果
python skills/nas-setup/scripts/check.py
方式 2: Agent 手动逐项检查(脚本无法运行时备用)
- 检查
.env配置 — Agent 读 .env,检查 NAS_HOST/NAS_USER/NAS_PASSWORD 非空 - 验证 NAS 登录 — 调 list_files MCP tool
- 验证 RAG daemon — 调 index_status() MCP tool
如果 .env 缺变量(Agent 交互修复)
check.py 返回 ❌ .env 配置: 不完整 时,Agent 主动逐条问用户,不要等用户去编辑:
Agent: "NAS 连接信息缺 2 项:
1. NAS_HOST — 极空间的 IP 地址是什么？
2. NAS_PASSWORD — 登录密码是什么？
请依次告诉我。"
用户: "192.168.1.100"
Agent: "收到 NAS_HOST=192.168.1.100。密码呢？"
用户: "mypassword"
Agent: [编辑 .env 文件,写入 NAS_HOST 和 NAS_PASSWORD]
Agent: [重跑 check.py]
"✅ .env 配置: 完整。剩下 NAS 登录... [继续验证]"
关键规则:
- 不要只打印"请编辑 .env"就完事 — 必须逐条交互问用户
- 密码类变量(NAS_PASSWORD/KEY_SSH)不回显
- 写入 .env 后立即重跑 check.py 验证
检查结果解读
✅ NAS 登录:通(用户 xxx)
✅ device_id:有效
✅ RAG daemon:在线(391 chunks, last_reindex xxx)
或:
❌ NAS 登录: N001414 短信验证 — 把真实 device_id 填入 .env
⚠️ RAG daemon:未运行 — label-manager scan 按文件名匹配
跟其他 skill 的关系
所有其他 skill(SKILL.md)的第一步应引用:
**前置**:先调 nas-setup 检查环境。REQUIRED: 调 whoami() 验证登录,调 index_status() 验证 RAG。
故障排查
| 现象 | 处理 |
|---|---|
.env 找不到 |
cp .env.example .env |
NAS_USER/NAS_PASSWORD 为空 |
编辑 .env 填入 |
| whoami() 返回 N001414 | 把已登记的真实 device_id 填入 .env 的 NAS_DEVICE_ID(32 字符 hex) |
| whoami() 超时 | 检查 NAS_HOST 是否正确,ping <nas_ip> |
| index_status() 超时 | nas-rag docker 没跑: cd rag-server && docker compose up -d |
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 81 lines · 125 tokens per session scan A b4fb2e78e2cd
nas-setup is a skill published in the GitHub repository coracoo/zspace_skill (36 stars, last pushed 2mo ago), licensed MIT. It adds 125 tokens to every session and 891 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
gke-compute-classes
Configures, optimizes, and troubleshoots GKE ComputeClasses. Use when configuring Spot VMs with on-demand fallback, targeting specific accelerators (GPUs/TPUs) or machine families, restricting ComputeClass access, or debugging pending pods related to node pool auto-creation. Do not use for cluster-level Node Auto…
jetson-diagnostic
Read-only Jetson health snapshot for identity, memory, GPU, thermal, power, storage, services, and top processes.
holoscan-install-wheel
Install Holoscan SDK 5.x CUDA 13 Python wheels in an isolated environment, choosing the full stack or version-matched components.
offensive-z-wave
Z-Wave attack methodology — sniffing with Z-Force / EZ-Wave / RTL-SDR + ZniffMobile, S0 (legacy) network-key derivation flaw and key reuse, S2 (modern) ECDH commissioning analysis, replay/injection on unauthenticated nodes, default-key brute-force on test deployments, and home-automation hub pivots. Use when targeting…
doca-socket-relay
Use this skill when the operator is driving the DOCA Socket Relay to bridge a socket-oriented host application onto a BlueField DPU peer without rewriting it — picking the deployment shape (in-process, sidecar, or BlueField service container), configuring the host-side socket and the DPU-side forwarding endpoint…
hsb-flash
Flash the FPGA on an HSB board connected to an NVIDIA devkit. Supports HSB Lattice boards (FPGA versions 2407, 2412, 2507, 2510) and Leopard Imaging VB1940 "all-in-one" cameras (FPGA versions 2507, 2510). Uses release-specific YAML manifests and board-type-specific program commands. Lattice and VB1940 commands must…