Aloudata CAN SKILLS - metric-query
v1.0.2构建指标平台(语义层)的指标数据查询 API 请求。当用户需要查询指标数据、构造指标查询API请求体、使用同环比/占比/排名/时间限定等快速计算、定义临时指标、设置维度筛选过滤条件时,必须使用此 Skill。 触发场景包括但不限于:用户提到"查询指标"、"指标API"、"指标数据"、"语义层查询"、"metric...
⭐ 2· 565·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the runtime instructions: the SKILL.md describes how to discover metrics/dimensions via the Aloudata CAN Gateway and then construct the metrics query JSON. The declared requirement (CAN_API_KEY) and the domain whitelist (gateway.can.aloudata.com) are exactly what this purpose needs.
Instruction Scope
SKILL.md instructs only to call the Gateway search and query endpoints, read the CAN_API_KEY env var, and construct JSON per a clear set of rules. It does not instruct reading unrelated files, other env vars, or sending data to endpoints outside gateway.can.aloudata.com. The doc explicitly forbids guessing metric names and mandates Gateway lookups first.
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is written to disk or downloaded during install, which minimizes installation risk.
Credentials
Only one required environment variable (CAN_API_KEY) is declared and used; this is expected for authenticating to the Gateway. The SKILL.md documents where the user should store the key (~/.openclaw/.env). There are no additional unrelated credentials requested.
Persistence & Privilege
always is false and the skill is user-invocable; autonomous invocation is allowed (platform default). The skill does not request permanent/system-wide privileges or attempt to modify other skills or agent configs.
Assessment
Before installing, confirm you trust aloudata.com and are comfortable storing a CAN_API_KEY for the Gateway in your agent environment. This skill will read that env var and make outbound requests to gateway.can.aloudata.com to discover metrics and execute queries — ensure the API key has appropriate (least) privileges and rotate it if you suspect misuse. If you do not use Aloudata CAN, do not provide a CAN_API_KEY. Monitor network activity and API usage for unexpected calls.Like a lobster shell, security has layers — review code before you run it.
latestvk976bc0r2x3zvbrn10ddatawe9835s3w
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
