Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/coracoo/zspace_skill/nas-setupnpx skills add coracoo/zspace_skill --skill nas-setupgit clone --depth 1 https://github.com/coracoo/zspace_skillWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00125 | $0.00891 |
| Opus 5 | $0.00063 | $0.00445 |
| Sonnet 5 | $0.00025 | $0.00178 |
| Haiku 4.5 | $0.00013 | $0.00089 |
Grade A, and why
nas-setup scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
NAS Setup — 环境检查 & 登录验证
概述
在任何 NAS 操作之前,必须先跑这个前置检查。它验证:
.env是否配置完整- NAS 能否登录(鉴权链是否通)
- device_id 是否有效(N001414 短信验证绕过了吗)
- RAG daemon 是否在线(需要 RAG 的 skill 才检查)
工作流
前置检查(每次被触发时执行)
方式 1(推荐): exec 自动化脚本,一次性输出全部结果
python skills/nas-setup/scripts/check.py
方式 2: Agent 手动逐项检查(脚本无法运行时备用)
- 检查
.env配置 — Agent 读 .env,检查 NAS_HOST/NAS_USER/NAS_PASSWORD 非空 - 验证 NAS 登录 — 调 list_files MCP tool
- 验证 RAG daemon — 调 index_status() MCP tool
如果 .env 缺变量(Agent 交互修复)
check.py 返回 ❌ .env 配置: 不完整 时,Agent 主动逐条问用户,不要等用户去编辑:
Agent: "NAS 连接信息缺 2 项:
1. NAS_HOST — 极空间的 IP 地址是什么？
2. NAS_PASSWORD — 登录密码是什么？
请依次告诉我。"
用户: "192.168.1.100"
Agent: "收到 NAS_HOST=192.168.1.100。密码呢？"
用户: "mypassword"
Agent: [编辑 .env 文件,写入 NAS_HOST 和 NAS_PASSWORD]
Agent: [重跑 check.py]
"✅ .env 配置: 完整。剩下 NAS 登录... [继续验证]"
关键规则:
- 不要只打印"请编辑 .env"就完事 — 必须逐条交互问用户
- 密码类变量(NAS_PASSWORD/KEY_SSH)不回显
- 写入 .env 后立即重跑 check.py 验证
检查结果解读
✅ NAS 登录:通(用户 xxx)
✅ device_id:有效
✅ RAG daemon:在线(391 chunks, last_reindex xxx)
或:
❌ NAS 登录: N001414 短信验证 — 把真实 device_id 填入 .env
⚠️ RAG daemon:未运行 — label-manager scan 按文件名匹配
跟其他 skill 的关系
所有其他 skill(SKILL.md)的第一步应引用:
**前置**:先调 nas-setup 检查环境。REQUIRED: 调 whoami() 验证登录,调 index_status() 验证 RAG。
故障排查
| 现象 | 处理 |
|---|---|
.env 找不到 |
cp .env.example .env |
NAS_USER/NAS_PASSWORD 为空 |
编辑 .env 填入 |
| whoami() 返回 N001414 | 把已登记的真实 device_id 填入 .env 的 NAS_DEVICE_ID(32 字符 hex) |
| whoami() 超时 | 检查 NAS_HOST 是否正确,ping <nas_ip> |
| index_status() 超时 | nas-rag docker 没跑: cd rag-server && docker compose up -d |
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 81 lines · 125 tokens per session scan A b4fb2e78e2cd
nas-setup is a skill published in the GitHub repository coracoo/zspace_skill (18 stars, last pushed 27d ago), licensed MIT. It adds 125 tokens to every session and 891 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
add-macos-statusbar
Add a macOS menu bar status indicator for NanoClaw. Shows a bolt icon with a green/red dot indicating whether NanoClaw is running, with Start, Stop, and Restart controls. macOS only.
cli-anything-3mf
3MF mesh geometry editor — detect and resize cylindrical holes, repair meshes, compare 3D printing files. Works with BambuStudio and PrusaSlicer 3MF files.
platform-port
Guide porting FastLED to new MCU platforms, including int.h types, clockless drivers, SPI implementations, and platform detection. Use when adding support for a new microcontroller family or board.
doca-compress
Use this skill for hands-on DOCA Compress programming on a BlueField DPU, ConnectX NIC, or host with DOCA — enabling compress-deflate, decompress-deflate, decompress-lz4-stream, or decompress-lz4-block tasks on a docacompress context (the hardware supports DEFLATE both directions plus LZ4 decompress; LZ4 encode is NOT…
pcbway
PCBWay PCB fabrication and assembly — turnkey/consigned assembly, design rules, ordering workflow. Alternative to JLCPCB for manufacturing. Use with KiCad. Use this skill when the user mentions PCBWay, needs turnkey assembly (PCBWay sources parts by MPN), has parts not available on LCSC, needs assembled boards with…
anta-validation
Validate Arista EOS network state with structured pass/fail verdicts using ANTA. Use for "is this switch healthy", "did my change break anything", "verify BGP/interfaces/hardware are correct", "run a health check on this device". Read-only. A test for a feature the device does not run reports notapplicable — never a…