Token导航 LogoToken导航TokenDH.com
研究检索敏感数据github未标认证来源可访问许可证需确认审计提醒

coral-create-source-spec珊瑚创建源规范

Agent Skill

coral-create-source-spec 用于查找、检索和筛选相关信息,适合在 Codex、Claude、Cursor、Gemini CLI 中需要根据关键词、任务场景或来源线索快速定位候选结果时使用。可结合来源仓库、安装命令和原始 README 继续核验具体用法。安装前建议确认权限范围、维护状态,以及是否会触发联网、命令执行或文件读写。

总安装

264

周安装

11

GitHub Stars

公开资料未说明

下载量

88
CodexClaudeCursorGemini CLI

安装说明

本站只整理中文说明和来源信息,不托管安装包,也不代用户安装。

GitHub

来源数

2

许可证

unknown

最后核验

2026-05-01

来源状态

来源可访问

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:coral-create-source-spec(珊瑚创建源规范)
来源仓库:https://github.com/withcoral/skills
仓库路径:skills/coral-create-source-spec
安装命令:
npx skills add https://github.com/withcoral/skills --skill coral-create-source-spec
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill;本站只展示命令,不托管安装包,也不自动执行。

skills.shnpx skills
npx skills add https://github.com/withcoral/skills --skill coral-create-source-spec

简介

用于创建或修复 Coral 数据源的 YAML 规范文件,确保可被查询和验证。

  • 适用于外部开发者独立编写数据源配置,支持本地 lint、添加与测试流程。
  • 默认生成可独立运行的源定义,需配合 coral source lint 等命令校验格式。
  • 安装方式:GitHub,命令为 npx skills add https://github.com/withcoral/skills --skill coral-create-source-spec。
  • 适用宿主包括 Codex、Claude、Cursor、Gemini CLI,接入前应确认版本、权限和运行环境要求。

SKILL.md

Create Source Spec

Use this skill when the task is to author or repair a Coral source spec.

Goal

Produce a valid, queryable Coral source spec that works with:

  • coral source lint <path>
  • coral source add --file <path>
  • coral source test <name>
  • coral sql
  • coral.tables and coral.columns
  • coral.inputs for source variables and secrets

Default Mode

Default to standalone source authoring for external developers.

That means:

  • create a YAML source spec file
  • lint it early with coral source lint <path>
  • add it to Coral with coral source add --file <path> when you need to exercise it as a source
  • validate by querying it
  • iterate until the shape is correct

Only switch to repo-bundled layout when the user is explicitly editing the Coral repo.

Output Modes

  • External authoring:

- create a standalone source spec such as ./my-source.yaml - validate structure with coral source lint./my-source.yaml - load it with coral source add --file./my-source.yaml when you need to query it through Coral

  • Coral repo contribution:

- write the source spec to sources/<name>/manifest.yaml - add representative test_queries for a basic smoke/connection check of the source - validate with coral source test <name> and repo checks

Workflow

  1. Read the provider API docs or inspect the local dataset.
  2. Start with one small table and a few columns.
  3. Define:

- source metadata - backend - base URL or file location - auth - variables and secrets - tables - filters - response extraction - pagination - typed columns

  1. Lint the source spec:

- coral source lint <path>

  1. Validate the source in the right mode:

- standalone specs: coral source add --file <path> and inspect with coral sql - coral source add is non-interactive by default: each input key is read from the matching environment variable. Export required variables and secrets before running, or pass --interactive to be prompted. - named or repo-bundled sources: coral source test <name>

  1. Inspect the exposed shape:

- inspect coral.tables - inspect coral.columns - inspect coral.inputs to verify variables, secrets, defaults, hints, and required flags

  1. Query representative tables with coral sql.
  2. If you are relying on coral source test, make sure test_queries gives you a basic smoke/connection check for the source.
  3. Refine the spec and repeat.

Authoring Rules

  • Start small and expand table coverage incrementally.
  • Use the source manifest schema as both inspiration for authoring and validation of structure: https://github.com/withcoral/coral/blob/main/crates/coral-spec/src/schema/source_manifest.schema.json
  • Use source variables for non-secret configuration.
  • Use source secrets for credentials.
  • Keep table names stable and SQL-friendly.
  • Mark filters as required only when the API truly requires them.
  • Prefer explicit pagination when the API shape is known.
  • Verify pagination with actual row fetches, not only COUNT(*).
  • Add or update test_queries when you want coral source test to perform a basic smoke/connection check.

Metadata UX Rules

Use these rules for top-level source metadata so source discovery and setup are consistent.

description

  • Start with Query....
  • Make the first sentence capability-first: list the key entities users can query.
  • Preferred template:

- Query <entities> from <Provider> (<Cloud or self-hosted when relevant>).

  • Keep description focused on data coverage, not setup steps.
  • Do not use vague phrasing such as:

- REST API v3 - OpenAPI provider - ... and more

  • Move auth/setup/permission details to input hints, not description text.

Input hints (inputs.<KEY>.hint)

Each hint should tell the user:

  • what value is expected
  • how to obtain it
  • minimum scope/permission guidance
  • one concrete format/example when useful

Specific guidance:

  • For URL/base inputs:

- say what the default means - include at least one concrete example - include self-hosted guidance when supported

  • For secrets:

- name the exact credential type (API key, PAT, application key, etc.) - include format constraints when relevant (for example, token prefixes) - include least-privilege scope guidance

  • For derived secrets (for example Basic auth blobs):

- include a short shell example (for example a Base64 command)

  • Prefer stable documentation links.

- Use official docs links and stable settings pages. - Avoid brittle click-path instructions as the primary guidance.

Keep hints concise and directly actionable.

Validation Loop

Use this loop during authoring:

# Export any required inputs first (key matches the input `key` in the spec),
# or pass --interactive to be prompted.
coral source lint ./my-source.yaml
coral source add --file ./my-source.yaml
coral sql "SELECT * FROM coral.tables WHERE schema_name = 'my_source'"
coral sql "SELECT * FROM coral.columns WHERE schema_name = 'my_source'"
coral sql "SELECT key, kind, value, default_value, hint, required, is_set FROM coral.inputs WHERE schema_name = 'my_source' ORDER BY key"

For repo-bundled or already-named sources, add test_queries for a basic smoke/connection check and run:

coral source test my_source

Then run targeted table queries until the source behaves correctly.

HTTP Sources

For HTTP-backed sources:

  • define backend: http
  • define base_url
  • define auth headers
  • define request path, query, and body only where needed
  • define response rows_path
  • define pagination explicitly when the provider pattern is known
  • define typed columns
  • add test_queries once you know which simple query or queries should confirm the source basically works

Read references/http-source-checklist.md when you need table-shape and pagination guidance.

If your HTTP source uses an Authorization header with a prefix (e.g. Authorization: Bearer <token>), you can use a secret input for the token and define the header as a template:

auth:
  headers:
    - name: Authorization
      from: template
      template: Bearer {{input.FOOBAR_API_KEY}}

Local Data Sources

For local file-backed sources:

  • define the file backend
  • define the source location
  • define file selection patterns if applicable
  • define typed columns

Deliverable

Report:

  • source spec path
  • lint / add / test commands used
  • validation commands run
  • assumptions made
  • blocked or unverified endpoints

适合场景

01

用户想查找某类 Agent Skill 时

02

需要根据任务场景推荐可安装能力包时

03

需要对比不同来源的安装命令和来源信息时

能力概览

能力 1

按任务关键词查找相关 Skills

能力 2

展示可复制的安装命令

能力 3

保留来源站点、仓库和原始说明,方便继续核验

能力 4

展示第三方安全扫描或审计结果

安装后应在对应宿主中按原始 README 的触发条件使用;具体调用方式请以来源页面和 README 为准。

平台分布

Codex

38.32%
按下载量换算34

Claude

29.2%
按下载量换算26

Cursor

19.32%
按下载量换算17

Gemini CLI

10.31%
按下载量换算9

安全审计

Gen Agent Trust Hub

通过

Socket

通过

Snyk

可疑

权限和风险

敏感数据

该 Skill 可能接触密钥、Token、环境变量或敏感配置,应进入高风险复核队列,默认不自动发布。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。来源安全扫描存在 warning/failed 结果,不能写成本站确认安全。当前只有一个来源,正式发布前建议补源仓库或其他目录站核验。

来源信息

继续浏览同类 Skills