grafana

SUSPICIOUS: the setup and package source are fairly coherent, but the skill's core model routes Grafana access, tokens, and data through ClawLink rather than official Grafana endpoints. This third-party proxying is disproportionate to a plain Grafana integration and raises medium risk even without clear evidence of malware.