Ns analyze event
Investigates an existing N|Solid event payload and correlates relevant MCP evidence. Use when the user provides or references an event such as process-blocked, new-vulnerability-found, agent-exit, uncaught exception, stack trace, span data. Routes follow-up to CPU, memory, vulnerability, or tracing workflows when needed.From its SKILL.md
npx -y skills add nodesource/nsolid-plugin --skill ns-analyze-eventAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
2 things to look at
- no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
- 12 stars12 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
SKILL.md
2.9 KB, as published. Nobody here has run it
1. Parse the Event
- Extract these fields first:
event,type,severity,app,agent,time, andargs. - If
argsis a JSON string, parse it before doing anything else. - If
argsalready include a stack trace, span data, trace identifiers, or other direct evidence, analyze that payload before reaching for more MCP tools. - Identify whether the event is best treated as performance, security, lifecycle, or error oriented.
2. Branch by Event Type
- Performance events such as
process-blocked, event loop lag, and high CPU:- Call
metrics-historicwithfield: ["cpuUserPercent", "heapUsed", "loopEstimatedLag"],q: "app=<app>"orq: "id=<agent>", andstart/endaround the event time. - Call
assetsto look for nearby profiles or snapshots. - If relevant assets exist, prefer
asset-summary.
- Call
- Security events such as
new-vulnerability-found:- Call
vulnerabilitiesfor the affected application. - Call
application-packagesto identify the loaded package versions.
- Call
- Lifecycle events such as
agent-exitor repeated restarts:- Call
events-historicwith the sameappor agentid, plusstart/endaround the event time. - Call
metrics-historicwith explicitfieldandqbefore the event to spot resource spikes.
- Call
- Error events such as uncaught exceptions:
- Parse
args.stack. - If the agent is still connected and you have
id,threadId,scriptId, andpath, callruntime-code; a plain stack trace alone is not enough.
- Parse
3. Recommend the Right Next Step
- If the issue needs deeper work, point to the most relevant follow-up skill:
ns-cpu-spike-analysis,ns-memory-spike-analysis,ns-analyze-vulnerabilities, orns-analyze-tracing.
4. Present the Result
- Structure the final answer around:
- Summary of what happened.
- Evidence inspected from the event payload and any MCP calls.
- Root cause hypothesis.
- Most pragmatic next step.
5. Write the Report to Disk
- Ask the user if they want to save the report to disk.
- If the user confirms, write the final report as a markdown file (
.md) under.nsolid/assets/— for example.nsolid/assets/event-analysis-<appName>-<classification>.md.
Guardrails
- Do not give a generic answer before checking the event type and the relevant MCP evidence.
- Do not ask for a new capture until you have checked whether assets already exist.
- Do not ignore stack, trace, or span data that is already present in the event payload.
- If the event lacks enough data, say exactly what is missing.