{
  "name": "grafana-cloud-mcp — 1 skill",
  "slug": "source-skills-ee832480ee6e4c2195bceaa8",
  "type": "skills",
  "category": "developer-tools",
  "example": false,
  "evidence_state": "pinned_source_listing",
  "stamp": "Pinned source listing — machine-checked",
  "summary": "Pinned source declarations and file hashes were listed.",
  "outcome": "Listed 1 skill declaration. Ran 15 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.",
  "rule_results": [
    "The retained source tree matches its acquisition manifest.",
    "Declared skill names (listing.json): grafana-cloud-mcp-tools"
  ],
  "task": "What declarations and files are present in this pinned source?",
  "setup": "Git blob acquisition followed by static source inspection.",
  "limitations": "Scope: acquisition and static inspection. Command results: commands.json.",
  "source_url": "https://github.com/grafana/ai-marketplace.git",
  "documentation_url": "https://github.com/grafana/ai-marketplace.git",
  "commit": "6c28ba1961d502d82301cbd64d2322e6e960477c",
  "tree_sha256": "629b0d84fec64c82c1a4975e9391eaf52b433c0c5bceff86a805f5d07d2ec8ac",
  "file_sha256": {
    "plugins/grafana-cloud-mcp/.claude-plugin/plugin.json": "f09c01d8b2e9af17c97baee6d54a628b9089ab7c25cd3cf8a8b0312a53a4ca4f",
    "plugins/grafana-cloud-mcp/.codex-plugin/plugin.json": "c3ace0828520bc2d363e8448b443d11426a0698cd74ee9941cc1400f12243236",
    "plugins/grafana-cloud-mcp/.cursor-plugin/plugin.json": "c3e2fff9fd78f9226525d1216984a4c3b9f8c04425f0a16ba1fc3b321dd1c0aa",
    "plugins/grafana-cloud-mcp/.mcp.json": "6ec65a239cb6acf2cdf3d0beae346652b4594d9838ec4c28f96b37d3e4c56735",
    "plugins/grafana-cloud-mcp/POWER.md": "bd9475162f495fa4e02c5de70c7c96a81d00753155b934fac806637ba224ffcb",
    "plugins/grafana-cloud-mcp/README.md": "ddd5bb7adbbc34cc37f83f5527dc01d88109f463b864cab26ab0c33249c1e602",
    "plugins/grafana-cloud-mcp/assets/logo.svg": "c7e6c3a1af641dc921fe92ccf31acb9c80dad0ff1c0073f110c30ed4c41b9023",
    "plugins/grafana-cloud-mcp/mcp.json": "a4c0bcaf3183b30847b1fc642002ca77b30a7c6c852b990047ae31f880bc44d0",
    "plugins/grafana-cloud-mcp/skills/grafana-cloud-mcp-tools/SKILL.md": "ef06860b9d2e983e9c36c8ca17e321bca6f084ab1849c4f187429c79d42e7b51",
    "plugins/grafana-cloud-mcp/steering/grafana-cloud-mcp-tools.md": "a7c9336350b7314839f00d27dce34f58c6156bf28e2c650b5f6682205fe753d3"
  },
  "lockfiles": [
    "LOCK.json"
  ],
  "utc_date": "2026-10-19T00:10:25Z",
  "source_date": "2026-10-16",
  "discovered_date": "2026-10-16",
  "retested_date": "2026-10-19",
  "reviewed_date": "2026-10-19",
  "published_date": "2026-10-19",
  "modified_date": "2026-10-19",
  "reviewer": "machine pipeline",
  "harness_version": "toolwitness harness at commit 53efd18d38dc811ec548136f3fb71986c6b99be6",
  "claude_code_version": "Not applicable: static source inspection (commands.json).",
  "model_id": "Not applicable: static source inspection (commands.json).",
  "scanner_version": "Not applicable: static source inspection.",
  "rulepack_version": "Not applicable: static source inspection.",
  "agents": [],
  "disclaimer": "This record lists declarations and file hashes from a pinned source tree. Git command results from acquisition and static inspection are retained in commands.json. Scope: acquisition and static inspection. It is not a security or quality verdict. Changed bytes are outside this record.",
  "commands": [
    "Ran 15 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."
  ],
  "prompt_list": [
    "Not applicable: static source inspection (commands.json)."
  ],
  "history": [
    "2026-10-19T00:10:25Z: pinned source inspection"
  ],
  "application": {
    "name": "grafana-cloud-mcp — 1 skill",
    "softwareVersion": "6c28ba1961d502d82301cbd64d2322e6e960477c",
    "applicationCategory": "DeveloperApplication",
    "operatingSystem": "Not exercised"
  },
  "artifacts": {
    "transcript": "Ran 15 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.",
    "sinkhole_log": "Not applicable: static source inspection (commands.json).",
    "canary_log": "Not applicable: static source inspection (commands.json).",
    "scanner_output": "Not applicable: static source inspection (commands.json).",
    "normalized_text": "{\n  \"listing\": {\n    \"skills\": [\n      {\n        \"path\": \"plugins/grafana-cloud-mcp/skills/grafana-cloud-mcp-tools/SKILL.md\",\n        \"name\": \"grafana-cloud-mcp-tools\",\n        \"description\": \"Connect to and use the Grafana Cloud MCP server effectively, including natural-language Grafana Assistant questions and observability investigations. Covers setup, OAuth authorization, tool categories, read/write access scopes, and best practices for context window management. Use when the user wants to set up Grafana Cloud MCP, ask Grafana Assistant a question, investigate metrics, logs, traces, profiles, dashboards, alerts, or incidents, needs guidance on which tool to use, or wants to understand access scopes.\",\n        \"files\": {\n          \"plugins/grafana-cloud-mcp/skills/grafana-cloud-mcp-tools/SKILL.md\": \"ef06860b9d2e983e9c36c8ca17e321bca6f084ab1849c4f187429c79d42e7b51\"\n        }\n      }\n    ],\n    \"hooks\": [],\n    \"executions\": []\n  }\n}"
  },
  "review_input": {
    "identity_artifact": "identity.json",
    "evidence_sha256": {
      "LOCK.json": "ba19e6f7a48f84c5043d8455a3cb988961b90ae46e3b81e09b88fe02141ba8b1",
      "commands.json": "fa27553682d4fc48cc52c228ae28a032646f0310f1e102298164ba497321b202",
      "complete.json": "91b504b43905fdc009504d516c45eea831f39a1995b9e7d69987c9756c936d6f",
      "identity.json": "d76978f10509d32d8028784c6aa0ccbbc23ac6436e4bcb51edce0f0563b05863",
      "listing.json": "fc497341159cb5e58923363aa66149947b81cb1693df969a1bebd1dc2615eab2",
      "selection.json": "0ee6cf5e2f4ac80ffc4bfc9e72e290a9fb8ed9071f6f87aa9ccbfb1f0280b786"
    },
    "claims": [
      {
        "id": "acquired",
        "field": "summary",
        "text": "Pinned source declarations and file hashes were listed.",
        "sources": [
          "LOCK.json",
          "listing.json",
          "commands.json"
        ]
      },
      {
        "id": "listed",
        "field": "outcome",
        "text": "Listed 1 skill declaration. Ran 15 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.",
        "sources": [
          "LOCK.json",
          "listing.json",
          "commands.json"
        ]
      },
      {
        "id": "tree",
        "field": "rule_results.0",
        "text": "The retained source tree matches its acquisition manifest.",
        "sources": [
          "LOCK.json",
          "listing.json",
          "commands.json"
        ]
      },
      {
        "id": "declared",
        "field": "rule_results.1",
        "text": "Declared skill names (listing.json): grafana-cloud-mcp-tools",
        "sources": [
          "LOCK.json",
          "listing.json",
          "commands.json"
        ]
      }
    ]
  },
  "review": {
    "kind": "machine-checked",
    "date": "2026-10-19",
    "reviewed_sha256": "76656184972e18bbf7187c712c5f2e09dbd91b29e770f3ee528a366d0485b26d",
    "gates": "9d725eb034bdd92ba9a19f5d86054559c892970849d262df41edd8ad32deb33d",
    "codex": "71d4ae7d13c71ffc39252e1df1756d8b8b6369a33377612237897e2dbbe63c2d",
    "grok": "57f3237c82238453100d10b4d46baeb19389a8deca4b484081aa1b78fbe2f216",
    "summary": "Deterministic gates passed; every claim rebuilt from evidence with a reviewed template; Grok reported no standing refutation."
  }
}