安全扫描
OpenClaw
安全
high confidenceThis is an instruction-only, read-only Grafana helper whose declared purpose and runtime instructions are internally consistent; it does not request credentials or install code, but it depends on an underlying Grafana connector to actually access data.
评估建议
This skill is a safe, read-only set of runtime instructions and won’t itself access your Grafana or databases — it only tells an agent how to behave. Before installing/use, check which Grafana connector or skill your agent will use to actually perform searches and queries: ensure that connector requests only a read-only Grafana API token and does not require database credentials (ClickHouse, etc.) unless you explicitly want direct datasource queries. If you want to prevent any write actions, ver...详细分析 ▾
✓ 用途与能力
The name and description (read-only Grafana dashboard/panel inspection) match the SKILL.md: all instructions focus on searching dashboards, inspecting panels/variables, extracting queries, and rerunning panel queries. The skill does not request unrelated binaries, environment variables, or config paths. It explicitly limits itself to read-only workflows.
ℹ 指令范围
The instructions stay within a read-only analytics scope and explicitly forbid writes. One area to note: 'rerun the panel query' and the escalation guidance ('decide whether to use Grafana datasource queries or direct ClickHouse') imply the need for a live Grafana connector or datasource access; the skill itself contains no concrete API calls or auth instructions, so in practice another connector/skill will perform those actions. This is sensible but worth verifying in your environment (see user guidance).
✓ 安装机制
Instruction-only skill with no install spec and no code files that would be written to disk. Lowest-risk category for installation behavior.
✓ 凭证需求
The skill declares no environment variables, credentials, or config paths. That aligns with a read-only instruction-only helper; however, the actual runtime ability to read dashboards/panels will depend on a separate Grafana integration which will require credentials — confirm that integration requests only a read-only Grafana API token.
✓ 持久化与权限
No 'always: true' flag and no requests to modify agent configuration or other skills. The skill is user-invocable and may be called autonomously by agents (platform default), which is expected for a helper skill.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/17
● 无害
安装命令 点击复制
官方npx clawhub@latest install grafana-readonly
镜像加速npx clawhub@latest install grafana-readonly --registry https://cn.clawhub-mirror.com
技能文档
Use this skill as the default Grafana entrypoint for analytics work.
Core workflow
- 查找 relevant dashboard.
- Inspect panels 和 variables.
- Prefer reading 或 rerunning existing panel 之前 writing 新的 查询.
- Stay 读取-仅 unless 用户 explicitly asks 对于 creation 或 modification work.
默认 task order
1. Locate dashboard
Use dashboard search/list actions first.Prefer this when the user asks things like:
- “这个指标在哪个看板里？”
- “有没有收入/LTV/注册转化相关看板？”
- “帮我找睡眠内容消费的图表”
2. Inspect dashboard structure
After finding a likely dashboard, read:- dashboard title / uid
- panel 列表
- 变量 列表
- 默认 时间 range 或 刷新 settings 如果 可用
Do this before answering confidently. Many mistakes come from grabbing the wrong panel.
3. Inspect panel 查询
Before explaining a metric definition, extract the panel query/config.Look for:
- datasource
- 查询 language / 查询 text
- ref IDs / multiple queries
- 变量 references
- transformations
Use this when the user asks:
- “这个图怎么算的？”
- “这个 DAU 的口径是什么？”
- “这个 panel 背后查的是哪张表/哪个 datasource？”
4. Rerun panel 查询
When the user wants the same chart under another condition, rerun the existing panel query with:- 不同 时间 range
- 不同 variables
- 不同 格式 如果 supported
Prefer rerunning an existing panel over inventing a new query.
读取-仅 rules
- 做 不 创建 dashboards 在...中 skill.
- 做 不 更新 dashboards 在...中 skill.
- 做 不 删除 dashboards, panels, alerts, 或 annotations.
- 如果 task requires 新的 dashboard creation, hand off 到 build-oriented skill 或 explicit implementation flow.
Answering rules
When replying after Grafana reads, provide:
- answer 第一个
- panel/dashboard used
- 任何 键 变量 或 时间-range assumptions
- uncertainty 如果 panel 做 不 fully match question
Do not dump raw Grafana JSON unless the user explicitly wants it.
Minimum action coverage
This skill is expected to support these read paths:
- 搜索 dashboards
- 获取 dashboard details
- 列表 panels
- 获取 panel 查询
- 列表 variables
- run panel 查询
If an installed Grafana skill does not cover most of these, treat it as partial coverage and plan a local supplement.
当...时 Grafana 不 enough
Escalate beyond this skill when:
- 否 matching dashboard/panel exists
- 用户 needs arbitrary 新的 SQL 查询
- needed split 不 supported 由 existing variables
- 用户 asking 对于 新的 dashboard design
In those cases, switch to the analytics workflow skill and decide whether to use Grafana datasource queries or direct ClickHouse.
References
Read these only when needed:
references/action-checklist.md对于 concrete Grafana action matrix 和 MVP coveragereferences/evaluation-notes.md对于 为什么rpe-grafanalightweight candidate 和 在哪里 likely falls short
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制