Grafana Readonly
v1.0.0Read existing Grafana dashboards and panels without modifying them. Use when answering questions about values already visible in Grafana, locating the right...
⭐ 0· 164·0 current·0 all-time
by@qwqcode
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name and description (read-only Grafana dashboard/panel inspection) match the SKILL.md: all instructions focus on searching dashboards, inspecting panels/variables, extracting queries, and rerunning panel queries. The skill does not request unrelated binaries, environment variables, or config paths. It explicitly limits itself to read-only workflows.
Instruction Scope
The instructions stay within a read-only analytics scope and explicitly forbid writes. One area to note: 'rerun the panel query' and the escalation guidance ('decide whether to use Grafana datasource queries or direct ClickHouse') imply the need for a live Grafana connector or datasource access; the skill itself contains no concrete API calls or auth instructions, so in practice another connector/skill will perform those actions. This is sensible but worth verifying in your environment (see user guidance).
Install Mechanism
Instruction-only skill with no install spec and no code files that would be written to disk. Lowest-risk category for installation behavior.
Credentials
The skill declares no environment variables, credentials, or config paths. That aligns with a read-only instruction-only helper; however, the actual runtime ability to read dashboards/panels will depend on a separate Grafana integration which will require credentials — confirm that integration requests only a read-only Grafana API token.
Persistence & Privilege
No 'always: true' flag and no requests to modify agent configuration or other skills. The skill is user-invocable and may be called autonomously by agents (platform default), which is expected for a helper skill.
Assessment
This skill is a safe, read-only set of runtime instructions and won’t itself access your Grafana or databases — it only tells an agent how to behave. Before installing/use, check which Grafana connector or skill your agent will use to actually perform searches and queries: ensure that connector requests only a read-only Grafana API token and does not require database credentials (ClickHouse, etc.) unless you explicitly want direct datasource queries. If you want to prevent any write actions, verify the Grafana integration can be restricted to read-only API tokens and watch for any separate analytics skill that might attempt to run direct DB queries when Grafana is insufficient.Like a lobster shell, security has layers — review code before you run it.
latestvk973qjmwsw8s712zmxwe80n5yx8320av
License
MIT-0
Free to use, modify, and redistribute. No attribution required.