Token导航 LogoToken导航TokenDH.com
研究检索敏感数据github未标认证来源可访问许可证需确认审计异常

spanora-setup斯帕诺拉设置

Agent Skill

spanora-setup 用于查找、检索和筛选相关信息,适合在 Codex、Claude、Cursor、Gemini CLI 中需要根据关键词、任务场景或来源线索快速定位候选结果时使用。可结合来源仓库、安装命令和原始 README 继续核验具体用法。安装前建议确认权限范围、维护状态,以及是否会触发联网、命令执行或文件读写。

总安装

3,378

周安装

138

GitHub Stars

1

下载量

1,093
CodexClaudeCursorGemini CLI

安装说明

本站只整理中文说明和来源信息,不托管安装包,也不代用户安装。

GitHub

来源数

2

许可证

unknown

最后核验

2026-05-01

来源状态

来源可访问

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:spanora-setup(斯帕诺拉设置)
来源仓库:https://github.com/spanora/skills
仓库路径:skills/spanora-setup
安装命令:
npx skills add https://github.com/spanora/skills --skill spanora-setup
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill;本站只展示命令,不托管安装包,也不自动执行。

skills.shnpx skills
npx skills add https://github.com/spanora/skills --skill spanora-setup

简介

spanora-setup 用于查找、检索和筛选相关信息。

  • 适合在 Codex、Claude、Cursor、Gemini CLI 中根据关键词、任务场景或来源线索快速定位候选结果。
  • 通过 npx skills add 命令从指定 GitHub 仓库安装,需结合原始 README 核验具体用法。
  • 安装前建议确认权限范围、维护状态,以及是否会触发联网、命令执行或文件读写操作。
  • 适用宿主包括 Codex、Claude、Cursor、Gemini CLI,接入前应确认版本、权限和运行环境要求。

SKILL.md

Spanora Setup Agent Skill

You are integrating Spanora AI observability into the user's project. Follow this guide step by step.

1. When to Invoke

Activate this skill when the user says any of:

  • "add spanora", "setup spanora", "integrate spanora"
  • "add AI observability", "add LLM monitoring"
  • "monitor LLM calls with spanora", "track AI costs"
  • "instrument my agent", "add tracing to my agent"
  • mentions "spanora" in the context of adding observability

2. Public Documentation — Source of Truth

The official Spanora documentation at https://spanora.ai/docs is always up to date and is the canonical source of truth. The bundled references/ files in this skill are the primary step-by-step guide, but if you encounter ambiguity, an unfamiliar API, edge cases, or something that doesn't match what you see in the user's code — fetch the relevant doc page using WebFetch. If the public docs contradict a bundled reference, the public docs win.

Key pages by integration pattern:

You do not need to fetch docs on every run — only when something is unclear or you suspect the bundled references may be stale.

3. Prerequisites

The user must have a Spanora API key (starts with ak_). Never ask the user to paste their API key into the conversation.

  1. Check if SPANORA_API_KEY is already set in .env (or .env.local) or as a shell environment variable. Only check for presence — do not output or log the value.
  2. If already set, proceed to the next step.
  3. If not set, instruct the user to add it themselves:

- Tell them: "Please add your Spanora API key to your .env file as SPANORA_API_KEY=ak_.... You can find your key at https://spanora.ai/settings." - Do not accept the key in conversation or write the key value to any file. - Wait for the user to confirm they have set it before proceeding.

  1. If .env is not in .gitignore, remind the user to add it.

4. Language Detection

Determine the project language by checking for config files in the project root:

File foundLanguage
package.jsonJavaScript / TypeScript
pyproject.tomlPython
setup.pyPython
requirements.txtPython

If both JS and Python files are present, ask the user which part of the project to instrument.

5. Detection — Determine the Integration Pattern

JavaScript / TypeScript

Read package.json and check dependencies and devDependencies:

Dependency foundPattern to use
aiPattern A — Vercel AI SDK
@anthropic-ai/sdkPattern B — Anthropic SDK
openaiPattern C — OpenAI SDK
None of the abovePattern D — Raw Core SDK

If multiple are present, prefer in order: A > B > C. Use the pattern matching the SDK the user's code actually calls. If unsure, ask.

Python

Read pyproject.toml (or requirements.txt / setup.py) and check dependencies:

Dependency foundPattern to use
langchainPattern E — LangChain / LangGraph

More Python patterns may be added in the future. If the user's Python project does not use LangChain, inform them that Spanora supports any Python framework via raw OpenTelemetry — refer them to the LangChain reference as a template for OTEL setup.

6. Package Manager Detection

JavaScript / TypeScript

File foundPackage manager
pnpm-lock.yamlpnpm
yarn.lockyarn
bun.lockbbun
package-lock.jsonnpm

Python

File foundPackage manager
uv.lockuv
poetry.lockpoetry
Pipfile.lockpipenv
Otherwisepip

7. Install

JavaScript / TypeScript

pnpm add @spanora-ai/sdk
# or: npm install @spanora-ai/sdk / yarn add @spanora-ai/sdk / bun add @spanora-ai/sdk

Python (LangChain)

pip install opentelemetry-sdk opentelemetry-exporter-otlp opentelemetry-instrumentation-langchain langgraph
# or: uv add ... / poetry add ... / pipenv install ...

No Spanora SDK is needed for Python — tracing uses standard OpenTelemetry.

8. Integration — Read the Matching Reference

Based on the detected pattern, read the corresponding reference file for code examples and API usage:

JavaScript / TypeScript:

  • Pattern A (Vercel AI SDK): Read references/vercel-ai.md
  • Pattern B (Anthropic SDK): Read references/anthropic.md
  • Pattern C (OpenAI SDK): Read references/openai.md
  • Pattern D (Raw Core SDK): Read references/core-sdk.md

Python:

  • Pattern E (LangChain / LangGraph): Read references/langchain-python.md

For JS/TS patterns, always also read references/common.md for shared patterns: init(), shutdown(), tool tracking (trackToolHandler, runTool), multi-agent shared context, agent naming guidance, API key setup, and the migration checklist. Python patterns are self-contained in their reference file.

Apply the patterns from the reference files to the user's code. The reference files contain production-ready examples verified against the SDK source and integration tests.

9. Ensure Full Instrumentation Coverage

Every AI execution must produce at least one trace. For each LLM call site in the user's code, use the highest-fidelity approach available:

  1. Auto-telemetryexperimental_telemetry for Vercel AI SDK, auto-instrumentation for LangChain. Preferred when available — zero manual work.
  2. Provider wrapperstrackOpenAI, trackAnthropic, trackVercelAI / trackVercelAIStream. Use when auto-telemetry is unavailable for a call site (e.g. tool-loop agents, custom agent patterns).
  3. Core SDK functionstrackLlm, trackLlmStream, recordLlm. Fallback for any LLM call not covered by the above.

After applying the base integration, scan the user's code for any LLM call that would not produce a span. If found, wrap it with the appropriate tracking function from the list above. Do not leave blind spots.

10. Offer Optional Enrichments

After applying the base integration, mention these optional features to the user. Do not add them by default — only include them if the user's code has the relevant context available or the user asks for them:

  • User & org contextuserId, orgId, agentSessionId on track() calls. Links traces to end users, tenants, and sessions in the dashboard. Only add if the code has access to these values (e.g. from a request context, auth session, or API input).
  • Operation typeoperation on LLM meta (trackLlm, trackOpenAI, trackAnthropic, recordLlm). Defaults to "chat". Set to "embeddings" for embedding calls or "text_completion" for completion calls. Only relevant when the user's code makes non-chat LLM calls.

Field name reference:

  • track() uses agent (not agentName) for the agent name
  • LLM tracking functions use prompt (not promptInput) for the input prompt
  • LLM result/extractors use output (not promptOutput) for the output text

Each reference file has an "Optional Enrichments" section with code examples for these features.

适合场景

01

用户想查找某类 Agent Skill 时

02

需要根据任务场景推荐可安装能力包时

03

需要对比不同来源的安装命令和来源信息时

能力概览

能力 1

按任务关键词查找相关 Skills

能力 2

展示可复制的安装命令

能力 3

保留来源站点、仓库和原始说明,方便继续核验

能力 4

展示第三方安全扫描或审计结果

安装后应在对应宿主中按原始 README 的触发条件使用;具体调用方式请以来源页面和 README 为准。

平台分布

Codex

35.44%
按下载量换算387

Claude

31.62%
按下载量换算346

Cursor

20.08%
按下载量换算219

Gemini CLI

10.1%
按下载量换算110

安全审计

Gen Agent Trust Hub

可疑

Socket

通过

Snyk

未通过

权限和风险

敏感数据

该 Skill 可能接触密钥、Token、环境变量或敏感配置,应进入高风险复核队列,默认不自动发布。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。来源安全扫描存在 warning/failed 结果,不能写成本站确认安全。当前只有一个来源,正式发布前建议补源仓库或其他目录站核验。

来源信息

继续浏览同类 Skills