by flarelog-dev
# Add to your Claude Code skills
git clone https://github.com/flarelog-dev/skillLast scanned: 7/3/2026
{
"issues": [
{
"file": "SKILL.md",
"line": 197,
"type": "prompt-injection",
"message": "Possible concealment directive: \"Don't tell user\"",
"severity": "medium"
}
],
"status": "PASSED",
"scannedAt": "2026-07-03T07:21:35.505Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}skill is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by flarelog-dev. It has 0 GitHub stars.
Yes. skill passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/flarelog-dev/skill" and add it to your Claude Code skills directory (see the Installation section above). skill ships a SKILL.md manifest, so compatible agents can discover and load it automatically.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh skill against similar tools.
No comments yet. Be the first to share your thoughts!
30 days in the Featured rail · terms & refunds
You are helping the user integrate FlareLog into their application. FlareLog is a zero-dependency observability SDK that ships logs, errors, and W3C traces from any JavaScript runtime to a FlareLog dashboard or any OTLP backend.
FlareLog has two complementary layers. Most users need both:
The SDK (@flarelog/sdk) — runs inside the user's app. Captures errors
thrown during request handling, console.log output, and unhandled rejections.
Installed via npm install @flarelog/sdk. Framework-specific wrappers live at
subpaths like @flarelog/sdk/tanstack-start, @flarelog/sdk/hono, etc.
The Tail Worker (Cloudflare Workers only) — runs outside the user's app, after each request finishes. Captures crashes the SDK can't see: CPU timeouts, memory exhaustion (Error 1027), startup failures, and Error 1101. Deployed as a separate Worker from the tail-worker template.
If the user is on Cloudflare Workers (including Lovable), they need both the SDK and the Tail Worker. The SDK alone misses the most damaging crashes. Make sure to explain this — it's the #1 reason users think "FlareLog doesn't work" when they only installed the SDK.
Before writing any code, determine:
Ask the user if it's not obvious from context. Common signals:
| Signal | Likely stack |
|---|---|
| "Lovable", "lovable.app", "lovable.dev" | Lovable → TanStack Start on Cloudflare Workers |
createStart, @tanstack/react-start, src/start.ts |
TanStack Start |
next.config, pages/api, app/api |
Next.js |
new Hono(), hono/ |
Hono |
express(), app.use |
Express |
wrangler.toml, wrangler.jsonc, export default { fetch } |
Raw Cloudflare Workers |
vercel.json, api/ directory, runtime: "edge" |
Vercel Serverless/Edge |
useEffect, useState, .tsx in browser context |
React/browser |
Based on the stack, read only the relevant reference file before writing code. Each reference file has the exact install command, code snippet, and pitfalls for that framework.
| Stack | Reference file |
|---|---|
| TanStack Start / Lovable | references/tanstack-start.md |
| Next.js (Pages or App Router) | references/nextjs.md |
| Hono | references/hono.md |
| Express | references/express.md |
| Raw Cloudflare Workers | references/cloudflare-workers.md |
| Vercel (Serverless / Edge) | references/vercel.md |
| React / Browser | references/react.md |
If the user is on Cloudflare Workers (any framework), also read
references/tail-worker.md — it covers the Tail Worker setup that catches
crashes the SDK misses.
Follow this sequence. Adapt the phrasing to the user's experience level — if they mention Lovable or "I'm not a developer", use simpler language and avoid DevOps jargon. If they mention Cursor/wrangler/TypeScript, you can be more technical.
npm install @flarelog/sdk
Framework peer deps (e.g. @tanstack/react-start) are optional — only install
if the user doesn't already have them.
Use the exact code from the reference file. Do not improvise — the SDK has specific patterns for each framework, and deviating breaks things. Common pitfalls are called out in each reference file; read them.
The user needs a FLARELOG_API_KEY. They get it from the FlareLog dashboard at
flarelog.dev/login (free, no credit card).
Where to set it depends on the platform:
| Platform | Where to set the key |
|---|---|
| Node.js / Vercel | .env file or dashboard env vars — process.env.FLARELOG_API_KEY works at module load |
Cloudflare Workers (with nodejs_compat) |
wrangler.jsonc [vars] or dashboard secrets — process.env works per-request inside .server() callbacks |
Cloudflare Workers (without nodejs_compat) |
Dashboard secrets only — read via cloudflare:workers env binding. The zero-arg middleware handles this automatically. |
| Lovable | Lovable's "Secrets / Environment variables" panel (do NOT prefix with VITE_) |
Critical for Cloudflare Workers / Lovable: Do NOT create the logger at module
scope with flarelog({ apiKey: env.FLARELOG_API_KEY }). The env binding is
undefined at module load. Use the zero-arg middleware form
(tanstackStartMiddleware() / honoMiddleware()) which reads the binding
lazily on the first request. This is the #1 cause of "logs work in dev but not
in preview" — see references/env-resolution.md for the full matrix.
If the user is on Cloudflare Workers or Lovable, the SDK alone is not enough — it can't see crashes that happen before the code runs (CPU timeout, OOM, startup failure, Error 1101). They need the Tail Worker.
Walk them through:
https://github.com/flarelog-dev/tail-workerwrangler secret put FLARELOG_API_KEYwrangler.toml to point at their app's Worker namenpm run deploySee references/tail-worker.md for the full instructions and pitfalls.
If the user uses Cursor or Claude Desktop, offer to set up the MCP server so
their AI can read production logs and debug for them. See
references/mcp-setup.md.
After setup, tell the user to:
If logs don't appear:
[vars] plaintext
var) and that nodejs_compat is enabled OR they're using the zero-arg middleware.env is loaded and FLARELOG_API_KEY is set[FlareLog] No backend configured — this means
the SDK couldn't find the API key and fell back to console-onlyModule-scope env.FLARELOG_API_KEY on Workers — env is undefined at
module load. Use the zero-arg middleware or create the logger inside the
handler. See references/env-resolution.md.
getRequestEvent from @tanstack/react-start — this API was removed
before v1 stable. Do NOT use it. The SDK's zero-arg middleware uses
cloudflare:workers env binding instead.
import("cloudflare:workers") in source — bundlers (Vite, esbuild,
webpack) can't resolve this runtime-only module. The SDK hides it behind
new Function("return import(spec)") so it's invisible to static analysis.
If you're writing custom code that reads the binding, use the same pattern.
Forgetting the Tail Worker — the SDK alone misses Error 1101, CPU timeouts, and OOM crashes. On Workers, always set up the Tail Worker too.
VITE_ prefix on Lovable — don't prefix FLARELOG_API_KEY with VITE_.
That pushes the key into the client bundle and leaks it. Server-only secrets
(no prefix) are injected as Worker bindings.
Sentry conflict — if the user has Sentry installed, FlareLog and Sentry can coexist. Don't tell them to remove Sentry. FlareLog catches crashes Sentry can't see; Sentry has session replay FlareLog doesn't. They complement each other.
Many FlareLog users are "vibe coders" — they built their app with Lovable, Cursor, v0, or Bolt, and they're not experienced developers. They don't know what "observability" or "OTel" means. When you detect this audience:
For experienced developers (they mention wrangler, TypeScript, CI/CD), you can be more technical and skip the hand-holding.
getRequestEvent() — it doesn't exist in v1 stableVITE_ on Lovable