mattermost/grafana
plugins/grafana/skills/grafana/SKILL.md
Investigate production issues, query logs and metrics, and explore dashboards on the Mattermost Grafana instance at grafana.internal.mattermost.com.
$ install --global
skillsauthnpx skillsauth add mattermost/mattermost-ai-marketplace grafanaInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 25, 2026, 9:28 AM54.3s1 file scanned
SKILL.md
- name:
- grafana
- description:
- Investigate production issues, query logs and metrics, and explore dashboards on the Mattermost Grafana instance at grafana.internal.mattermost.com.
- allowed-tools:
- mcp__grafana__list_datasources, mcp__grafana__search_dashboards, mcp__grafana__get_dashboard_by_uid, mcp__grafana__get_dashboard_summary, mcp__grafana__get_dashboard_panel_queries, mcp__grafana__query_prometheus, mcp__grafana__list_prometheus_metric_names, mcp__grafana__list_prometheus_metric_metadata, mcp__grafana__list_prometheus_label_names, mcp__grafana__list_prometheus_label_values, mcp__grafana__query_loki_logs, mcp__grafana__list_loki_label_names, mcp__grafana__list_loki_label_values, mcp__grafana__query_loki_stats, mcp__grafana__query_loki_patterns, mcp__grafana__get_annotations, mcp__grafana__list_oncall_schedules, mcp__grafana__get_current_oncall_users, mcp__grafana__list_alert_groups, mcp__grafana__generate_deeplink
Grafana Investigation Skill
You are investigating production issues on the Mattermost Grafana instance.
Environment
- Grafana URL: https://grafana.internal.mattermost.com
- Loki data source:
Loki Production - Prometheus data source:
Prometheus Prod
Namespace identifiers
| Product | Namespace UID |
|-------------|----------------------------------|
| Community | rxocmq9isjfm3dgyf4ujgnfz3c |
| Hub | c4ja3w3h8tgwiy5c5dbmhmkpje |
These namespace UIDs appear as the namespace label in both Loki and Prometheus. Always filter by namespace when the user's question is scoped to a specific product.
Data source UIDs (pre-cached — do not call list_datasources)
| Data source | UID |
|-------------------|-----------------------|
| Loki Production | P4F55509B51A00EB7 |
| Prometheus Prod | P27C405C01959D762 |
Use these directly. Only call list_datasources if a query fails with an unknown UID error.
Querying logs (Loki)
Use query_loki_logs with:
datasourceUid: the UID forLoki Productionquery: a LogQL expression, e.g.{namespace="rxocmq9isjfm3dgyf4ujgnfz3c"} |= "error"timeRange:{from: "now-1h", to: "now"}unless the user specifies otherwiselimit: 100 (default); increase if needed
When exploring unknown log structure, first call list_loki_label_names and list_loki_label_values to understand available labels.
For volume/rate queries, prefer query_loki_stats over fetching raw lines.
Querying metrics (Prometheus)
Use query_prometheus with:
datasourceUid: the UID forPrometheus Prodquery: a PromQL expression- Omit
timefor current value; provide it for historical point-in-time
When discovering metrics, use list_prometheus_metric_names and list_prometheus_label_names. Use list_prometheus_metric_metadata to understand a metric's type and help text before writing PromQL.
Finding dashboards
Use search_dashboards with a descriptive query. Then use get_dashboard_summary to understand panel layout before fetching the full JSON with get_dashboard_by_uid. Use get_dashboard_panel_queries to see what PromQL/LogQL a panel runs.
Generating links
Use generate_deeplink to produce a Grafana Explore or dashboard URL to share with the user. Always include the relevant time range.
Workflow
- Clarify scope: determine which product (Community, Hub, or both) and time range.
- Use pre-cached datasource UIDs from the table above — do not call
list_datasources. - Find relevant dashboards with
search_dashboards. - Query logs and metrics as needed to answer the question.
- Synthesise findings: summarise what you found, including error rates, patterns, and relevant log lines.
- Provide a deeplink to the most relevant dashboard or Explore query so the user can drill in further.
Always prefer targeted queries over broad ones — filter by namespace and narrow time ranges first, then widen if needed.
Related Skills
mattermost/qa-analysis
tools
VerifiedTrustedCommunity
Analyze a GitHub pull request for risk level and generate concrete QA recommendations. Accepts a PR URL or "owner/repo#number" reference. Uses `gh` CLI to fetch the diff and metadata, computes blast radius, scores six risk dimensions, and returns a structured JSON risk assessment. Use when the user invokes /qa-analysis:qa-analysis with a GitHub PR URL or reference, or asks for a PR risk assessment, QA recommendations, or "what should I test?" for a given pull request.
2SKILL.mdUpdated May 23, 2026
mattermost/add-agents-mcp-server
tools
VerifiedTrustedCommunity
Add an MCP (Model Context Protocol) server to a Mattermost plugin so the Agents plugin can call its tools. Use when implementing cross-plugin MCP, exposing AI tools from a Mattermost plugin to the Agents plugin, or wiring up the `pluginmcp` helper from mattermost-plugin-agents.
2SKILL.mdUpdated May 20, 2026
mattermost/create-mattermost-plugin
tools
VerifiedTrustedCommunity
Create a new Mattermost plugin from the starter template in the current directory. Use when creating a new plugin from scratch, scaffolding a Mattermost plugin, or bootstrapping a plugin project.
2SKILL.mdUpdated May 12, 2026
mattermost/security-fix
development
VerifiedTrustedCommunity
Orchestrates test-driven fixes for Mattermost security tickets (Jira/Atlassian) with a Staff Security Engineer mindset: failing secure-behavior tests first, then implementation, then security review and edge-case loops, then opening a non-draft PR that follows `.github/PULL_REQUEST_TEMPLATE.md` when present, with a vague public description (no exploit detail). Use when the user invokes /security-fix:security-fix with a mattermost.atlassian.net browse URL, MM-* security work, backend permission or authorization bugs, or asks for this security TDD workflow.
2SKILL.mdUpdated Apr 29, 2026