grafana-cloud-mcp — 1 skill

Pinned source listing — machine-checked

What declarations and files are present in this pinned source?

Pinned source declarations and file hashes were listed.

Review

Machine-checked ·

Run UTC
Reviewed
Published
Updated

Observations · Limitations · Evidence

Works with:

Works with Claude Code
Works with Codex
Works with Gemini CLI
Works with Grok Build

What we ran

Git blob acquisition followed by static source inspection.

What we saw

Listed 1 skill declaration. Ran 15 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

Limits

Scope: acquisition and static inspection. Command results: commands.json.

developer-tools · skills · Upstream source · Upstream documentation

Pinned source inspection only; no runtime platform was exercised. UTC 2026-10-19T00:10:25Z, tree 629b0d84fec64c82c1a4975e9391eaf52b433c0c5bceff86a805f5d07d2ec8ac.

No browser or computer-use tools. Pin this exact version; the stamp does not follow updates.

Full record
name
grafana-cloud-mcp — 1 skill
slug
source-skills-ee832480ee6e4c2195bceaa8
type
skills
category
developer-tools
example
false
evidence state
pinned_source_listing
stamp
Pinned source listing — machine-checked
summary
Pinned source declarations and file hashes were listed.
outcome
Listed 1 skill declaration. Ran 15 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.
rule results
["The retained source tree matches its acquisition manifest.","Declared skill names (listing.json): grafana-cloud-mcp-tools"]
task
What declarations and files are present in this pinned source?
setup
Git blob acquisition followed by static source inspection.
limitations
Scope: acquisition and static inspection. Command results: commands.json.
source url
https://github.com/grafana/ai-marketplace.git
documentation url
https://github.com/grafana/ai-marketplace.git
commit
6c28ba1961d502d82301cbd64d2322e6e960477c
tree sha256
629b0d84fec64c82c1a4975e9391eaf52b433c0c5bceff86a805f5d07d2ec8ac
file sha256
{"plugins/grafana-cloud-mcp/.claude-plugin/plugin.json":"f09c01d8b2e9af17c97baee6d54a628b9089ab7c25cd3cf8a8b0312a53a4ca4f","plugins/grafana-cloud-mcp/.codex-plugin/plugin.json":"c3ace0828520bc2d363e8448b443d11426a0698cd74ee9941cc1400f12243236","plugins/grafana-cloud-mcp/.cursor-plugin/plugin.json":"c3e2fff9fd78f9226525d1216984a4c3b9f8c04425f0a16ba1fc3b321dd1c0aa","plugins/grafana-cloud-mcp/.mcp.json":"6ec65a239cb6acf2cdf3d0beae346652b4594d9838ec4c28f96b37d3e4c56735","plugins/grafana-cloud-mcp/POWER.md":"bd9475162f495fa4e02c5de70c7c96a81d00753155b934fac806637ba224ffcb","plugins/grafana-cloud-mcp/README.md":"ddd5bb7adbbc34cc37f83f5527dc01d88109f463b864cab26ab0c33249c1e602","plugins/grafana-cloud-mcp/assets/logo.svg":"c7e6c3a1af641dc921fe92ccf31acb9c80dad0ff1c0073f110c30ed4c41b9023","plugins/grafana-cloud-mcp/mcp.json":"a4c0bcaf3183b30847b1fc642002ca77b30a7c6c852b990047ae31f880bc44d0","plugins/grafana-cloud-mcp/skills/grafana-cloud-mcp-tools/SKILL.md":"ef06860b9d2e983e9c36c8ca17e321bca6f084ab1849c4f187429c79d42e7b51","plugins/grafana-cloud-mcp/steering/grafana-cloud-mcp-tools.md":"a7c9336350b7314839f00d27dce34f58c6156bf28e2c650b5f6682205fe753d3"}
lockfiles
["LOCK.json"]
utc date
2026-10-19T00:10:25Z
source date
2026-10-16
discovered date
2026-10-16
retested date
2026-10-19
reviewed date
2026-10-19
published date
2026-10-19
modified date
2026-10-19
reviewer
Machine-checked
harness version
toolwitness harness at commit 53efd18d38dc811ec548136f3fb71986c6b99be6
claude code version
Not applicable: static source inspection (commands.json).
model id
Not applicable: static source inspection (commands.json).
scanner version
Not applicable: static source inspection.
rulepack version
Not applicable: static source inspection.
agents
[]
commands
["Ran 15 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."]
prompt list
["Not applicable: static source inspection (commands.json)."]
history
["2026-10-19T00:10:25Z: pinned source inspection"]
application
{"applicationCategory":"DeveloperApplication","name":"grafana-cloud-mcp — 1 skill","operatingSystem":"Not exercised","softwareVersion":"6c28ba1961d502d82301cbd64d2322e6e960477c"}
review input
{"claims":[{"field":"summary","id":"acquired","sources":["LOCK.json","listing.json","commands.json"],"text":"Pinned source declarations and file hashes were listed."},{"field":"outcome","id":"listed","sources":["LOCK.json","listing.json","commands.json"],"text":"Listed 1 skill declaration. Ran 15 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."},{"field":"rule_results.0","id":"tree","sources":["LOCK.json","listing.json","commands.json"],"text":"The retained source tree matches its acquisition manifest."},{"field":"rule_results.1","id":"declared","sources":["LOCK.json","listing.json","commands.json"],"text":"Declared skill names (listing.json): grafana-cloud-mcp-tools"}],"evidence_sha256":{"LOCK.json":"ba19e6f7a48f84c5043d8455a3cb988961b90ae46e3b81e09b88fe02141ba8b1","commands.json":"fa27553682d4fc48cc52c228ae28a032646f0310f1e102298164ba497321b202","complete.json":"91b504b43905fdc009504d516c45eea831f39a1995b9e7d69987c9756c936d6f","identity.json":"d76978f10509d32d8028784c6aa0ccbbc23ac6436e4bcb51edce0f0563b05863","listing.json":"fc497341159cb5e58923363aa66149947b81cb1693df969a1bebd1dc2615eab2","selection.json":"0ee6cf5e2f4ac80ffc4bfc9e72e290a9fb8ed9071f6f87aa9ccbfb1f0280b786"},"identity_artifact":"identity.json"}
review
{"codex":"71d4ae7d13c71ffc39252e1df1756d8b8b6369a33377612237897e2dbbe63c2d","date":"2026-10-19","gates":"9d725eb034bdd92ba9a19f5d86054559c892970849d262df41edd8ad32deb33d","grok":"57f3237c82238453100d10b4d46baeb19389a8deca4b484081aa1b78fbe2f216","kind":"machine-checked","reviewed_sha256":"76656184972e18bbf7187c712c5f2e09dbd91b29e770f3ee528a366d0485b26d","summary":"Deterministic gates passed; every claim rebuilt from evidence with a reviewed template; Grok reported no standing refutation."}

Downloadable evidence

transcript

Download complete transcript

Ran 15 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

sinkhole log

Download complete sinkhole log

Not applicable: static source inspection (commands.json).

canary log

Download complete canary log

Not applicable: static source inspection (commands.json).

scanner output

Download complete scanner output

Not applicable: static source inspection (commands.json).

normalized text

Download complete normalized text

{
  "listing": {
    "skills": [
      {
        "path": "plugins/grafana-cloud-mcp/skills/grafana-cloud-mcp-tools/SKILL.md",
        "name": "grafana-cloud-mcp-tools",
        "description": "Connect to and use the Grafana Cloud MCP server effectively, including natural-language Grafana Assistant questions and observability investigations. Covers setup, OAuth authorization, tool categories, read/write access scopes, and best practices for context window management. Use when the user wants to set up Grafana Cloud MCP, ask Grafana Assistant a question, investigate metrics, logs, traces, profiles, dashboards, alerts, or incidents, needs guidance on which tool to use, or wants to understand access scopes.",
        "files": {
          "plugins/grafana-cloud-mcp/skills/grafana-cloud-mcp-tools/SKILL.md": "ef06860b9d2e983e9c36c8ca17e321bca6f084ab1849c4f187429c79d42e7b51"
        }
      }
    ],
    "hooks": [],
    "executions": []
  }
}
Download full record JSON

Disclaimer

This record lists declarations and file hashes from a pinned source tree. Git command results from acquisition and static inspection are retained in commands.json. Scope: acquisition and static inspection. It is not a security or quality verdict. Changed bytes are outside this record.

Template placeholders refer to the snapshot metadata above.

Page updated