Borrowing it
Nothing to install: this file belongs to OpenRouterLabs/spawn. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/OpenRouterLabs/spawn/main/.claude/skills/setup-spa/SKILL.mdgit clone --depth 1 https://github.com/OpenRouterLabs/spawnWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/openrouterlabs/spawn/setup-spa)<a href="https://agentmods.dev/skills/openrouterlabs/spawn/setup-spa"><img src="https://agentmods.dev/badge/skills/openrouterlabs/spawn/setup-spa/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/openrouterlabs/spawn/setup-spa"><img src="https://agentmods.dev/badge/skills/openrouterlabs/spawn/setup-spa.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00021 | $0.01185 |
| Opus 5.5 | $0.00008 | $0.00474 |
| Sonnet 5.5 | $0.00004 | $0.00237 |
| Haiku 4.5 | $0.00002 | $0.00119 |
Grade B, and why
setup-spa scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
sudo systemctl daemon-reload How it starts
The opening of the file, as written. The whole thing — 129 lines — stays where its author put it; the contents beside it link to each section on GitHub.
SPA — Spawn's Personal Agent
Slack bot that listens in #proj-spawn via Socket Mode. When @mentioned, it collects the full thread, pipes it into a claude -p session, and streams Claude Code's responses back to the Slack thread in real-time.
Subsequent thread replies in tracked threads auto-trigger new Claude Code runs.
Slack App Setup
Option A: Create from manifest (recommended)
- Go to https://api.slack.com/apps
- Click Create New App > From a manifest
- Select your workspace
- Paste the contents of
slack-manifest.ymlfrom this directory - Click Create
- Socket Mode: Settings > Basic Information > scroll to "App-Level Tokens" > Generate Token and Scopes > add
connections:writescope > copy thexapp-...token - Install to Workspace: Features > OAuth & Permissions > Install > copy the
xoxb-...Bot User OAuth Token - Invite the bot to the target channel:
/invite @spa - Get the channel ID: Right-click channel name > View channel details > copy the ID (starts with
C)
Option B: Manual setup
- Go to https://api.slack.com/apps > Create New App > From scratch
- Name it
SPA, select the workspace - Socket Mode: Settings > Socket Mode > Enable > generate app-level token with
connections:writescope > savexapp-... - Event Subscriptions: Features > Event Subscriptions > Enable > subscribe to bot events:
app_mention,message.channels,message.groups - OAuth Scopes: Features > OAuth & Permissions > Bot Token Scopes:
app_mentions:read,channels:history,channels:read,groups:history,groups:read,chat:write,reactions:write - Install to Workspace > save
xoxb-...token - Invite bot to channel, get channel ID
Env Vars
| Var | Description |
|---|---|
SLACK_BOT_TOKEN |
Bot User OAuth Token (xoxb-...) |
SLACK_APP_TOKEN |
App-Level Token for Socket Mode (xapp-...) |
SLACK_CHANNEL_ID |
Channel ID to listen in (e.g. C0123456789) |
GITHUB_REPO |
Target repo context (default: OpenRouterLabs/spawn) |
REPO_ROOT |
Working directory for Claude Code (default: cwd) |
What ships with it
6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 129 lines · 21 tokens per session scan B 9d7de16ad39a
setup-spa is a skill published in the GitHub repository OpenRouterLabs/spawn (250 stars, last pushed 3d ago), licensed Apache-2.0. It adds 21 tokens to every session and 1,185 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
setup-spa compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| setup-spaOpenRouterLabs/spawn | Skill | 250 | 3d ago | Apache-2.0 | B | 21 | Claude Code |
| officecli-pitch-deckiOfficeAI/OfficeCLI | Skill | 33k | 7d ago | Apache-2.0 | A | 163 | Claude Code, Codex |
| morph-pptiOfficeAI/OfficeCLI | Skill | 33k | 7d ago | Apache-2.0 | A | 169 | Claude Code, Codex |
| officecli-academic-paperiOfficeAI/OfficeCLI | Skill | 33k | 7d ago | Apache-2.0 | A | 141 | Claude Code, Codex |
| officecli-financial-modeliOfficeAI/OfficeCLI | Skill | 33k | 7d ago | Apache-2.0 | A | 222 | Claude Code, Codex |
| officecli-pptxiOfficeAI/OfficeCLI | Skill | 33k | 7d ago | Apache-2.0 | A | 106 | Claude Code, Codex |
| officecliiOfficeAI/OfficeCLI | Skill | 33k | 7d ago | Apache-2.0 | A | 56 | Claude Code, Codex |