by 安全扫描
OpenClaw
安全
medium confidenceThe skill's requests, instructions, and single required environment variable (MATON_API_KEY) align with a Grafana API proxy/managed-auth integration; nothing in the SKILL.md asks for unrelated credentials or local files.
评估建议
This skill is internally consistent, but it relies on a third‑party proxy (maton.ai/gateway.maton.ai/ctrl.maton.ai). Before installing: verify Maton is a trusted provider, understand that MATON_API_KEY grants the proxy access to your Grafana API, and avoid giving an overly-privileged key (use least privilege). Review Maton's privacy/retention policy and rotate keys after use. If you prefer not to route Grafana traffic through an external gateway, consider a direct Grafana integration instead.详细分析 ▾
✓ 用途与能力
Name/description match the behavior: it documents calling a Maton gateway that proxies to Grafana and requires a Maton API key. The single required env var (MATON_API_KEY) is appropriate for a managed proxy service.
ℹ 指令范围
Instructions only describe HTTP calls to gateway.maton.ai and ctrl.maton.ai and how to manage connections; they do not instruct reading other env vars, local files, or unrelated system state. Note: all Grafana API traffic is routed through Maton endpoints (a third‑party proxy) — this is consistent with the stated 'managed authentication' but is an important trust consideration.
✓ 安装机制
Instruction-only skill with no install spec and no included code files — nothing is written to disk or downloaded during install.
✓ 凭证需求
Only one required env var (MATON_API_KEY) is declared and used in the examples. That credential is proportionate to using a managed API gateway. The SKILL.md also describes using a Grafana service account token in a browser flow (user-supplied), which is expected.
✓ 持久化与权限
Skill is not always-enabled and is user-invocable; it does not request system-wide config paths or other skills' credentials. Autonomous model invocation is allowed (platform default) but not combined with other privileged requests.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/6
Initial release of Grafana API skill with managed authentication. - Provides secure access to Grafana dashboards, data sources, folders, annotations, alerts, and teams via Maton API gateway. - Supports connection management (list, create, delete connections) through the Maton control panel. - Includes full guides for authenticating with Maton API, environment setup, and example Python requests. - Documents all major Grafana API endpoints for dashboards, folders, data sources, and annotations. - Enables integration for monitoring, visualization, and observability use cases.
● 无害
安装命令 点击复制
官方npx clawhub@latest install grafana-api
镜像加速npx clawhub@latest install grafana-api --registry https://cn.clawhub-mirror.com
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制