ClawHub

Promql Cli

v1.1.2

CLI for querying Prometheus and PromQL-compatible engines (Thanos, Cortex, VictoriaMetrics, Grafana Mimir, Grafana Tempo...) — instant queries, range queries...

⭐ 0· 93·0 current·0 all-time
bySamuel Berthe@samber
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description match the declared requirements: promql (the CLI) and jq (output processing) are exactly what a Prometheus/PromQL CLI skill needs. No unrelated credentials, binaries, or config paths are requested.
ℹ
Instruction Scope
SKILL.md provides clear, scoped runtime instructions (how to run queries, error handling, and explicit guidance not to create config files on behalf of users). One minor inconsistency: SKILL.md references several `references/*` files (installation, usage, debugging, etc.) but the package manifest contains only SKILL.md — those reference files are not present in the bundle. This may mean the agent will not be able to read those local reference files and should instead link to upstream docs or ask the user.
✓
Install Mechanism
Install spec uses `go` to build github.com/nalbury/promql-cli (source-built Go package) and `brew` to install jq. Both are standard, traceable mechanisms; no arbitrary downloads or obscure URLs are present.
✓
Credentials
The skill requests no environment variables or credentials. It properly warns about storing tokens in `~/.promql-cli.yaml`/`~/.promql_token` and explicitly instructs the agent not to create or transmit those config files or secrets.
✓
Persistence & Privilege
The skill does not request permanent presence (always: false) and does not attempt to modify other skills or global agent settings. `disable-model-invocation` is false (normal), meaning the agent could call the skill autonomously — this is expected for a usable skill and not problematic here.
Assessment
This skill appears to do what it claims: it's a wrapper around the promql CLI and uses jq for output parsing. Before installing, verify you trust the upstream Go package (github.com/nalbury/promql-cli) by inspecting its repository or release page. Ensure you have promql and jq on PATH (or allow the go install / brew steps), and do not paste Prometheus tokens or passwords into chat — follow the SKILL.md guidance to create and protect `~/.promql-cli.yaml`/`~/.promql_token` yourself (chmod 600). Note: SKILL.md references additional local `references/*` docs that are not included in the package; if you need those, fetch the upstream docs or ask the skill maintainer.

Like a lobster shell, security has layers — review code before you run it.

latestvk97997mt9mbv8txhpph6r0tyyx83h2zj

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📊 Clawdis
Binspromql, jq

Install

Go
Bins: promql
Homebrew
Bins: jq
brew install jq

Comments