cacheforge-ai/cacheforge-skills

python3 devops.py health check https://myapp.com/healthz

Or clone from [GitHub](https://github.com/cacheforge-ai/cacheforge-skills).

author: Anvil AI license: MIT homepage: https://github.com/cacheforge-ai/cacheforge-skills

license: MIT homepage: https://github.com/cacheforge-ai/cacheforge-skills user-invocable: true

homepage: https://github.com/cacheforge-ai/cacheforge-skills

- discord   - discord-v2 metadata: {"openclaw":{"emoji":"🛠<U+FE0F>","homepage":"https://github.com/cacheforge-ai/cacheforge-skills","requires":{"bins":["python3"]}}}

- discord-v2 metadata: {"openclaw":{"emoji":"🛠<U+FE0F>","homepage":"https://github.com/cacheforge-ai/cacheforge-skills","requires":{"bins":["python3"]}}} ---

metadata: {"openclaw":{"emoji":"🛠<U+FE0F>","homepage":"https://github.com/cacheforge-ai/cacheforge-skills","requires":{"bins":["python3"]}}}

# Check HTTP endpoint health python3 skills/agentic-devops/devops.py health check https://myapp.com/healthz

python3 skills/agentic-devops/devops.py health check https://myapp.com/healthz

#!/usr/bin/env python3

Built by Anvil AI — https://labs.anvil-ai.io

[Credential-related source omitted]

start = time.time()     try:         req = urllib.request.Request(url, method="GET")

try:         req = urllib.request.Request(url, method="GET")         req.add_header("User-Agent", "agentic-devops/1.0")

req = urllib.request.Request(url, method="GET")

req.add_header("User-Agent", "agentic-devops/1.0")         with urllib.request.urlopen(req, timeout=10) as resp:             status_code = resp.getcode()

with urllib.request.urlopen(req, timeout=10) as resp:

for port in ports:         try:             sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

try:             sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)             sock.settimeout(2)

sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

for port in common_ports:         try:             sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

try:             sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)             sock.settimeout(0.5)

sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

print(box_row(c("Built by Anvil AI — https://labs.anvil-ai.io", DIM), w))

print(c("  Built by Anvil AI — https://labs.anvil-ai.io", DIM))

description="Production-grade agent DevOps toolkit — Docker, process management, log analysis, health monitoring.",         formatter_class=argparse.RawDescriptionHelpFormatter,         epilog="Built by Anvil AI — https://labs.anvil-ai.io",

formatter_class=argparse.RawDescriptionHelpFormatter,         epilog="Built by Anvil AI — https://labs.anvil-ai.io",     )

epilog="Built by Anvil AI — https://labs.anvil-ai.io",

Or clone from [GitHub](https://github.com/cacheforge-ai/cacheforge-skills).

author: Anvil AI license: MIT homepage: https://github.com/cacheforge-ai/cacheforge-skills

license: MIT homepage: https://github.com/cacheforge-ai/cacheforge-skills user-invocable: true

homepage: https://github.com/cacheforge-ai/cacheforge-skills

- discord   - discord-v2 metadata: {"openclaw":{"emoji":"🔬","homepage":"https://github.com/cacheforge-ai/cacheforge-skills","requires":{"bins":["python3"]}}}

- discord-v2 metadata: {"openclaw":{"emoji":"🔬","homepage":"https://github.com/cacheforge-ai/cacheforge-skills","requires":{"bins":["python3"]}}} ---

metadata: {"openclaw":{"emoji":"🔬","homepage":"https://github.com/cacheforge-ai/cacheforge-skills","requires":{"bins":["python3"]}}}

- Token estimates are approximate (~4 characters per token). For precise counts, use a model-specific tokenizer. - No external dependencies required — runs with Python 3 stdlib only. - Built by Anvil AI — context engineering experts. https:

- Built by Anvil AI — context engineering experts. https://labs.anvil-ai.io

#!/usr/bin/env python3

Built by Anvil AI — https://labs.anvil-ai.io

[Credential-related source omitted]

print(box_sep(w))     print(box_row(c("  \u2139  Token estimates are approximate (~4 chars/token)", DIM), w))     print(box_row(c("  https://labs.anvil-ai.io", DIM), w))

print(box_row(c("  \u2139  Token estimates are approximate (~4 chars/token)", DIM), w))     print(box_row(c("  https://labs.anvil-ai.io", DIM), w))     print(box_bot(w))

print(box_row(c("  https://labs.anvil-ai.io", DIM), w))

print(box_sep(w))     print(box_row(c("  \u2139  Token estimates are approximate (~4 chars/token)", DIM), w))     print(box_row(c("  https://labs.anvil-ai.io", DIM), w))

print(box_row(c("  \u2139  Token estimates are approximate (~4 chars/token)", DIM), w))     print(box_row(c("  https://labs.anvil-ai.io", DIM), w))     print(box_bot(w))

print(box_row(c("  https://labs.anvil-ai.io", DIM), w))

print(box_sep(w))     print(box_row(c("  \u2139  Token estimates are approximate (~4 chars/token)", DIM), w))     print(box_row(c("  https://labs.anvil-ai.io", DIM), w))

print(box_row(c("  \u2139  Token estimates are approximate (~4 chars/token)", DIM), w))     print(box_row(c("  https://labs.anvil-ai.io", DIM), w))     print(box_bot(w))

print(box_row(c("  https://labs.anvil-ai.io", DIM), w))

print(box_sep(w))     print(box_row(c("  \u2139  Token estimates are approximate (~4 chars/token)", DIM), w))     print(box_row(c("  https://labs.anvil-ai.io", DIM), w))

print(box_row(c("  \u2139  Token estimates are approximate (~4 chars/token)", DIM), w))     print(box_row(c("  https://labs.anvil-ai.io", DIM), w))     print(box_bot(w))

print(box_row(c("  https://labs.anvil-ai.io", DIM), w))

"\n"             "Token estimates are approximate (~4 chars/token).\n"             "Built by Anvil AI \u2014 https://labs.anvil-ai.io\n"

"Token estimates are approximate (~4 chars/token).\n"             "Built by Anvil AI \u2014 https://labs.anvil-ai.io\n"         ),

"Built by Anvil AI \u2014 https://labs.anvil-ai.io\n"

- Strict trace-evidence gate in shadow eval (`--allow-synthetic` opt-in path with forced `pass=false`)

author: CacheForge license: MIT homepage: https://github.com/cacheforge-ai/cacheforge-skills

license: MIT homepage: https://github.com/cacheforge-ai/cacheforge-skills user-invocable: true

homepage: https://github.com/cacheforge-ai/cacheforge-skills

- reliability   - evals metadata: {"openclaw":{"emoji":"🧠","homepage":"https://github.com/cacheforge-ai/cacheforge-skills","requires":{"bins":["python3"]}}}

- evals metadata: {"openclaw":{"emoji":"🧠","homepage":"https://github.com/cacheforge-ai/cacheforge-skills","requires":{"bins":["python3"]}}} ---

metadata: {"openclaw":{"emoji":"🧠","homepage":"https://github.com/cacheforge-ai/cacheforge-skills","requires":{"bins":["python3"]}}}

Executable file

Executable file

Executable file

Executable file

Executable file

Executable file

Executable file

Executable file

Executable file

Executable file

Executable file

Executable file

[Credential-related source omitted]

Executable file

Executable file

Executable file

| Skill | What it does | |-------|-------------| | **[vibe-check](https://clawhub.com/skills/vibe-check)** | AI code quality + security review scorecard. |

|-------|-------------| | **[vibe-check](https://clawhub.com/skills/vibe-check)** | AI code quality + security review scorecard. | | **[prom-query](https://clawhub.com/skills/prom-query)** | Prometheus metrics + alert triage from natural la

| **[vibe-check](https://clawhub.com/skills/vibe-check)** | AI code quality + security review scorecard. |

| **[prom-query](https://clawhub.com/skills/prom-query)** | Prometheus metrics + alert triage from natural language. |

| **[dep-audit](https://clawhub.com/skills/dep-audit)** | This skill — unified dependency vulnerability auditing |

| **[rug-checker](https://clawhub.com/skills/rug-checker)** | Solana token rug-pull risk analysis |

Built by **[Anvil AI](https://labs.anvil-ai.io/)** — [See what our agents are building](https://labs.anvil-ai.io).

Skills built and battle-tested by [Anvil AI](https://labs.anvil-ai.io) on a live 5-agent autonomous swarm.

| **Rust** | `Cargo.lock` | `cargo audit` | `--json` | `cargo install cargo-audit` | | **Go** | `go.sum` | `govulncheck` | `-json` | `go install golang.org/x/vuln/cmd/govulncheck@latest` | | **SBOM** | any of the above | `syft` | `-o cyclon

| **SBOM** | any of the above | `syft` | `-o cyclonedx-json` | `curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh \| sh` |

| **SBOM** | any of the above | `syft` | `-o cyclonedx-json` | `curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh \| sh` |

**Docs:** - npm audit: https://docs.npmjs.com/cli/commands/npm-audit

- npm audit: https://docs.npmjs.com/cli/commands/npm-audit

- pip-audit: https://github.com/pypa/pip-audit

- cargo audit: https://github.com/rustsec/rustsec/tree/main/cargo-audit

- govulncheck: https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck

- syft: https://github.com/anchore/syft

"cargo-audit": { "available": false, "install": "cargo install cargo-audit" },     "govulncheck": { "available": false, "install": "go install golang.org/x/vuln/cmd/govulncheck@latest" },     "syft": { "available": false, "install": "curl -

"govulncheck": { "available": false, "install": "go install golang.org/x/vuln/cmd/govulncheck@latest" },     "syft": { "available": false, "install": "curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh" }   }

"syft": { "available": false, "install": "curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh" }

"syft": { "available": false, "install": "curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh" }

"severity": "critical",       "title": "Prototype Pollution in lodash",       "url": "https://github.com/advisories/GHSA-xxxx-yyyy-zzzz",

"title": "Prototype Pollution in lodash",       "url": "https://github.com/advisories/GHSA-xxxx-yyyy-zzzz",       "fix_available": true,

"url": "https://github.com/advisories/GHSA-xxxx-yyyy-zzzz",

"summary": {"critical":1,"high":2,"moderate":0,"low":1,"info":0,"total":4},   "vulnerabilities": [     {"id":"GHSA-0001","package":"lodash","installed_version":"4.17.15","severity":"critical","title":"Prototype Pollution","url":"https://exa

"vulnerabilities": [     {"id":"GHSA-0001","package":"lodash","installed_version":"4.17.15","severity":"critical","title":"Prototype Pollution","url":"https://example.com","fix_available":true,"fix_command":"npm audit fix","patched_version"

{"id":"GHSA-0001","package":"lodash","installed_version":"4.17.15","severity":"critical","title":"Prototype Pollution","url":"https://example.com","fix_available":true,"fix_command":"npm audit fix","patched_version":">=4.17.21"}

"summary": {"critical":0,"high":1,"moderate":1,"low":0,"info":0,"total":2},   "vulnerabilities": [     {"id":"PYSEC-2023-001","package":"requests","installed_version":"2.25.0","severity":"high","title":"Unintended Proxy","url":"https://osv.

"vulnerabilities": [     {"id":"PYSEC-2023-001","package":"requests","installed_version":"2.25.0","severity":"high","title":"Unintended Proxy","url":"https://osv.dev","fix_available":true,"fix_command":"pip install requests>=2.31.0","patche

{"id":"PYSEC-2023-001","package":"requests","installed_version":"2.25.0","severity":"high","title":"Unintended Proxy","url":"https://osv.dev","fix_available":true,"fix_command":"pip install requests>=2.31.0","patched_version":"2.31.0"}

rm -rf /tmp/dep-audit-test-* /tmp/npm-result.json /tmp/pip-result.json /tmp/dep-audit-error.json /tmp/unified.json /tmp/unified-mixed.json /tmp/report.md /tmp/report-mixed.md /tmp/dep-audit-empty

#!/usr/bin/env bash

trap 'rm -f "$INPUT_FILE"' EXIT

#!/usr/bin/env bash

),       title: (.advisory.title // "See advisory"),       url: (.advisory.url // ("https://rustsec.org/advisories/" + (.advisory.id // "unknown") + ".html")),

title: (.advisory.title // "See advisory"),       url: (.advisory.url // ("https://rustsec.org/advisories/" + (.advisory.id // "unknown") + ".html")),       fix_available: ((.versions.patched // []) | length > 0),

url: (.advisory.url // ("https://rustsec.org/advisories/" + (.advisory.id // "unknown") + ".html")),

#!/usr/bin/env bash

trap 'rm -f "$RESULT_FILE"' EXIT

severity: norm_severity($osv),       title: ($osv.summary // "See advisory"),       url: ("https://pkg.go.dev/vuln/" + $id),

title: ($osv.summary // "See advisory"),       url: ("https://pkg.go.dev/vuln/" + $id),       fix_available: (($osv.affected[0].ranges[0].events // []) | map(select(.fixed != null)) | length > 0),

url: ("https://pkg.go.dev/vuln/" + $id),

#!/usr/bin/env bash

{       id: ((.url // .source // .name // "unknown") | tostring |         (if test("^https://github.com/advisories/") then split("/")[-1] else . end)),

id: ((.url // .source // .name // "unknown") | tostring |         (if test("^https://github.com/advisories/") then split("/")[-1] else . end)),       package: $pkg.key,

(if test("^https://github.com/advisories/") then split("/")[-1] else . end)),

#!/usr/bin/env bash

severity: ((.id // "unknown") | severity_from_id),       title: ((.description // "See advisory for details") | split("\n")[0] | .[0:200]),       url: ("https://osv.dev/vulnerability/" + (.id // "unknown")),

title: ((.description // "See advisory for details") | split("\n")[0] | .[0:200]),       url: ("https://osv.dev/vulnerability/" + (.id // "unknown")),       fix_available: ((.fix_versions // []) | length > 0),

url: ("https://osv.dev/vulnerability/" + (.id // "unknown")),

#!/usr/bin/env bash

cargo_audit_info=$(tool_info "cargo-audit" "--version" "cargo install cargo-audit") govulncheck_info=$(tool_info "govulncheck" "-version" "go install golang.org/x/vuln/cmd/govulncheck@latest") syft_info=$(tool_info "syft" "version" "curl -s

syft_info=$(tool_info "syft" "version" "curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh")

syft_info=$(tool_info "syft" "version" "curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh")

#!/usr/bin/env bash

if ! command -v syft >/dev/null 2>&1; then   emit_error "syft not found. Install with: curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b /usr/local/bin" "$DIR"

emit_error "syft not found. Install with: curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b /usr/local/bin" "$DIR"

emit_error "syft not found. Install with: curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b /usr/local/bin" "$DIR"

1. 🔬 [What the hell is Forth? (2019)](https://blog.information-superhighway.net/...)

2. 🔬 [How many registers does an x86-64 CPU have?](https://blog.yossarian.net/2020/11/30/...)

3. 🔬 [Moving Forth (1993)](https://www.bradrodriguez.com/papers/moving1.htm)

4. 📚 [1x Forth: Chuck Moore on Forth (1999)](https://www.youtube.com/watch?v=NK0NwqF8F0k)

5. 🔬 [colorForth Tokens (2022)](https://www.youtube.com/watch?v=zl5IEpUBxfc)

6. 🔬 [jonesforth](https://github.com/nornagon/jonesforth)

7. 📰 [Cognate](https://cognate-lang.github.io/)

8. 📰 [uiua 0.18.0](https://www.uiua.org/blog/uiua-0.18.0)

9. 🔬 [colorForth](https://colorforth.github.io/cf.htm)

10. 📚 [Advent of Code in Forth](https://www.youtube.com/watch?v=jAFz8Maxvr4)

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

Built by **[Anvil AI](https://labs.anvil-ai.io/)** — [See what our agents are building](https://labs.anvil-ai.io).

Skills built and battle-tested by [Anvil AI](https://labs.anvil-ai.io) on a live 5-agent autonomous swarm.

[Credential-related source omitted]

#!/usr/bin/env bash

[Credential-related source omitted]

[Credential-related source omitted]

messages: [{role: "user", content: $prompt}]       }')     RESULT=$(printf '%s' "$request_body" | curl -sf --max-time 30 \

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

-H "content-type: application/json" \       -d @- \       https://api.anthropic.com/v1/messages 2>/dev/null | jq -r '.content[0].text // empty' 2>/dev/null) || RESULT=""

-d @- \       https://api.anthropic.com/v1/messages 2>/dev/null | jq -r '.content[0].text // empty' 2>/dev/null) || RESULT=""   fi

https://api.anthropic.com/v1/messages 2>/dev/null | jq -r '.content[0].text // empty' 2>/dev/null) || RESULT=""

[Credential-related source omitted]

[Credential-related source omitted]

messages: [{role: "user", content: $prompt}]       }')     RESULT=$(printf '%s' "$request_body" | curl -sf --max-time 30 \

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

-H "content-type: application/json" \       -d @- \       https://api.openai.com/v1/chat/completions 2>/dev/null | jq -r '.choices[0].message.content // empty' 2>/dev/null) || RESULT=""

-d @- \       https://api.openai.com/v1/chat/completions 2>/dev/null | jq -r '.choices[0].message.content // empty' 2>/dev/null) || RESULT=""   fi

https://api.openai.com/v1/chat/completions 2>/dev/null | jq -r '.choices[0].message.content // empty' 2>/dev/null) || RESULT=""

[Credential-related source omitted]

[Credential-related source omitted]

#!/usr/bin/env bash

[Credential-related source omitted]

while [ $attempt -lt $max_retries ]; do     local result     if result=$(curl -sf --max-time "$timeout" "$url" 2>/dev/null); then

local result     if result=$(curl -sf --max-time "$timeout" "$url" 2>/dev/null); then       echo "$result"

if result=$(curl -sf --max-time "$timeout" "$url" 2>/dev/null); then

#!/usr/bin/env bash

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

trap "rm -f '$ITEMS_FILE' '$CLASSIFIED_FILE'" EXIT

trap "rm -f '$ITEMS_FILE' '$CLASSIFIED_FILE'" EXIT

[Credential-related source omitted]

trap "rm -f '$CLASSIFIED_FILE'" EXIT

#!/usr/bin/env bash

HN_API="https://hacker-news.firebaseio.com/v0" USERNAME="${1:?Usage: hn-fetch.sh USERNAME [MAX_ITEMS] [SINCE_EPOCH]}"

info "Fetching HN profile for '$USERNAME'..." USER_JSON=$(safe_fetch "${HN_API}/user/${USERNAME}.json" 3 15) || {

USER_JSON=$(safe_fetch "${HN_API}/user/${USERNAME}.json" 3 15) || {

TMPFILE=$(mktemp)     TMPFILES+=("$TMPFILE")     curl -sf --max-time 8 "${HN_API}/item/${ITEM_ID}.json" > "$TMPFILE" 2>/dev/null &

TMPFILES+=("$TMPFILE")     curl -sf --max-time 8 "${HN_API}/item/${ITEM_ID}.json" > "$TMPFILE" 2>/dev/null &     PIDS+=($!)

curl -sf --max-time 8 "${HN_API}/item/${ITEM_ID}.json" > "$TMPFILE" 2>/dev/null &

[ "$STORY_COUNT" -ge "$MAX_ITEMS" ] && rm -f "$TMPFILE" && continue

rm -f "$TMPFILE"

#!/usr/bin/env bash

[Credential-related source omitted]

case "$FEED_URL" in     http://*|https://*) ;;

http://*|https://*) ;;

FEED_XML=$(curl -sf --max-time 10 -L "$FEED_URL" 2>/dev/null) || {

[Credential-related source omitted]

[Credential-related source omitted]

ns = {     'atom': 'http://www.w3.org/2005/Atom',

'atom': 'http://www.w3.org/2005/Atom',

'dc': 'http://purl.org/dc/elements/1.1/',

'content': 'http://purl.org/rss/1.0/modules/content/'

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),

and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

![Version](https://img.shields.io/badge/version-1.0.1-blue)

![License](https://img.shields.io/badge/license-MIT-green)

![Read-only](https://img.shields.io/badge/default-read--only-brightgreen)

Built by **[Anvil AI](https://labs.anvil-ai.io/)** — [See what our agents are building](https://labs.anvil-ai.io).

Skills built and battle-tested by [Anvil AI](https://labs.anvil-ai.io) on a live 5-agent autonomous swarm.

- **RBAC errors:** If a command returns a permission error, tell the user which permission is missing and suggest the RBAC role/clusterrole they need. - **kubectl not found:** Direct them to https://kubernetes.io/docs/tasks/tools/

- **kubectl not found:** Direct them to https://kubernetes.io/docs/tasks/tools/

[kind](https://kind.sigs.k8s.io/) is the fastest way to get a throwaway Kubernetes cluster for testing.

kubectl apply -f https://github.com/kubernetes-sigs/metrics-server/releases/latest/download/components.yaml

# Test blocked write — kubectl exec (must be rejected)

#!/usr/bin/env bash

preflight() {   if ! command -v kubectl &>/dev/null; then     err "kubectl not found — install from https://kubernetes.io/docs/tasks/tools/"

if ! command -v kubectl &>/dev/null; then     err "kubectl not found — install from https://kubernetes.io/docs/tasks/tools/"     exit 127

err "kubectl not found — install from https://kubernetes.io/docs/tasks/tools/"

fi   if ! command -v jq &>/dev/null; then     err "jq not found — install from https://jqlang.github.io/jq/download/"

if ! command -v jq &>/dev/null; then     err "jq not found — install from https://jqlang.github.io/jq/download/"     exit 127

err "jq not found — install from https://jqlang.github.io/jq/download/"

Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).

This project adheres to [Semantic Versioning](https://semver.org/).

export LOKI_ADDR="http://loki.internal:3100"

[Credential-related source omitted]

export ELASTICSEARCH_URL="https://es.internal:9200"

[Credential-related source omitted]

- **Read-only** — All operations are search/read only. No write, delete, or admin operations. - **No caching** — Log output is never written to disk. Logs may contain PII/secrets. - **URL validation** — Only `http://` and `https://` schemes

- **No caching** — Log output is never written to disk. Logs may contain PII/secrets. - **URL validation** — Only `http://` and `https://` schemes accepted. - **Safe JSON** — All JSON construction uses `jq --arg` to prevent injection.

- **URL validation** — Only `http://` and `https://` schemes accepted.

| `jq` | All backends | `apt install jq` / `brew install jq` | | `curl` | Loki, Elasticsearch | Usually pre-installed | | `logcli` | Loki (optional, falls back to curl) | [Install guide](https://grafana.com/docs/loki/latest/tools/logcli/) |

| `curl` | Loki, Elasticsearch | Usually pre-installed | | `logcli` | Loki (optional, falls back to curl) | [Install guide](https://grafana.com/docs/loki/latest/tools/logcli/) | | `aws` | CloudWatch | [Install guide](https://docs.aws.amazon

| `logcli` | Loki (optional, falls back to curl) | [Install guide](https://grafana.com/docs/loki/latest/tools/logcli/) |

| `aws` | CloudWatch | [Install guide](https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html) |

Built by **[Anvil AI](https://labs.anvil-ai.io/)** — [See what our agents are building](https://labs.anvil-ai.io).

Skills built and battle-tested by [Anvil AI](https://labs.anvil-ai.io) on a live 5-agent autonomous swarm.

| Variable | Required | Description | |----------|----------|-------------| | `LOKI_ADDR` | Yes | Loki server URL (e.g., `http://loki.internal:3100`) |

|----------|----------|-------------| | `LOKI_ADDR` | Yes | Loki server URL (e.g., `http://loki.internal:3100`) | | `LOKI_TOKEN` | No | Bearer token for authentication |

| `LOKI_ADDR` | Yes | Loki server URL (e.g., `http://loki.internal:3100`) |

| Variable | Required | Description | |----------|----------|-------------| | `ELASTICSEARCH_URL` | Yes | Base URL (e.g., `https://es.internal:9200`) |

|----------|----------|-------------| | `ELASTICSEARCH_URL` | Yes | Base URL (e.g., `https://es.internal:9200`) | | `ELASTICSEARCH_TOKEN` | No | `Basic <base64>` or `Bearer <token>` for auth |

| `ELASTICSEARCH_URL` | Yes | Base URL (e.g., `https://es.internal:9200`) |

|-------|-------|-----| | "No backends configured" | No env vars set | Set `LOKI_ADDR`, `ELASTICSEARCH_URL`, or configure AWS CLI | | "logcli not found" | logcli not installed | Install from https://grafana.com/docs/loki/latest/tools/logcli

| "No backends configured" | No env vars set | Set `LOKI_ADDR`, `ELASTICSEARCH_URL`, or configure AWS CLI | | "logcli not found" | logcli not installed | Install from https://grafana.com/docs/loki/latest/tools/logcli/ | | "aws: command not 

| "logcli not found" | logcli not installed | Install from https://grafana.com/docs/loki/latest/tools/logcli/ | | "aws: command not found" | AWS CLI not installed | Install from https://docs.aws.amazon.com/cli/latest/userguide/getting-start

| "aws: command not found" | AWS CLI not installed | Install from https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html | | "curl: command not found" | curl not installed | `apt install curl` or `brew install curl` |

| "curl: command not found" | curl not installed | `apt install curl` or `brew install curl` |

# Set up export LOKI_ADDR="http://localhost:3100"

export LOKI_ADDR="http://localhost:3100"

# Set up export ELASTICSEARCH_URL="http://localhost:9200"

export ELASTICSEARCH_URL="http://localhost:9200"

# Loki docker run -d --name loki -p 3100:3100 grafana/loki:2.9.0 export LOKI_ADDR="http://localhost:3100"

docker run -d --name loki -p 3100:3100 grafana/loki:2.9.0 export LOKI_ADDR="http://localhost:3100" bash scripts/log-dive.sh labels --backend loki

export LOKI_ADDR="http://localhost:3100"

# Elasticsearch docker run -d --name es -p 9200:9200 -e "discovery.type=single-node" -e "xpack.security.enabled=false" elasticsearch:8.12.0 export ELASTICSEARCH_URL="http://localhost:9200"

docker run -d --name es -p 9200:9200 -e "discovery.type=single-node" -e "xpack.security.enabled=false" elasticsearch:8.12.0 export ELASTICSEARCH_URL="http://localhost:9200" bash scripts/log-dive.sh indices --backend elasticsearch

export ELASTICSEARCH_URL="http://localhost:9200"

# LocalStack for CloudWatch docker run -d --name localstack -p 4566:4566 localstack/localstack export AWS_ENDPOINT_URL="http://localhost:4566"

docker run -d --name localstack -p 4566:4566 localstack/localstack export AWS_ENDPOINT_URL="http://localhost:4566" export AWS_REGION="us-east-1"

export AWS_ENDPOINT_URL="http://localhost:4566"

[Credential-related source omitted]

#!/usr/bin/env bash

jq -n '{       "error": "AWS CLI (aws) is required but not found.",       "install": "https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html",

"error": "AWS CLI (aws) is required but not found.",       "install": "https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html",       "backend": "cloudwatch",

"install": "https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html",

#!/usr/bin/env bash

# log-dive Elasticsearch/OpenSearch backend — queries via curl # Read-only. Never modifies or deletes logs.

validate_es() {   if [[ -z "${ELASTICSEARCH_URL:-}" ]]; then     jq -n '{"error":"ELASTICSEARCH_URL is not set. Export it: export ELASTICSEARCH_URL=https://es:9200","backend":"elasticsearch","exit_code":1}'

if [[ -z "${ELASTICSEARCH_URL:-}" ]]; then     jq -n '{"error":"ELASTICSEARCH_URL is not set. Export it: export ELASTICSEARCH_URL=https://es:9200","backend":"elasticsearch","exit_code":1}'     exit 1

jq -n '{"error":"ELASTICSEARCH_URL is not set. Export it: export ELASTICSEARCH_URL=https://es:9200","backend":"elasticsearch","exit_code":1}'

if ! command -v curl &>/dev/null; then

jq -n '{       "error": "curl is required for Elasticsearch queries but not found.",       "install": "apt install curl / brew install curl",

"error": "curl is required for Elasticsearch queries but not found.",

"install": "apt install curl / brew install curl",

# ─── Helper: build curl auth headers ───────────────────────────────────────

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

if [[ -n "$data" ]]; then     curl "${curl_args[@]}" -d "$data" "$url" 2>&1

curl "${curl_args[@]}" -d "$data" "$url" 2>&1

else     curl "${curl_args[@]}" "$url" 2>&1   fi

curl "${curl_args[@]}" "$url" 2>&1

#!/usr/bin/env bash

validate_loki() {   if [[ -z "${LOKI_ADDR:-}" ]]; then     jq -n '{"error":"LOKI_ADDR is not set. Export it: export LOKI_ADDR=http://loki:3100","backend":"loki","exit_code":1}'

if [[ -z "${LOKI_ADDR:-}" ]]; then     jq -n '{"error":"LOKI_ADDR is not set. Export it: export LOKI_ADDR=http://loki:3100","backend":"loki","exit_code":1}'     exit 1

jq -n '{"error":"LOKI_ADDR is not set. Export it: export LOKI_ADDR=http://loki:3100","backend":"loki","exit_code":1}'

if ! command -v logcli &>/dev/null && ! command -v curl &>/dev/null; then

jq -n '{       "error": "Neither logcli nor curl found. Install one of them.",       "install_logcli": "https://grafana.com/docs/loki/latest/tools/logcli/",

"error": "Neither logcli nor curl found. Install one of them.",

"install_logcli": "https://grafana.com/docs/loki/latest/tools/logcli/",       "install_curl": "apt install curl / brew install curl",       "backend": "loki",

"install_curl": "apt install curl / brew install curl",

# ─── Helper: build curl auth headers ───────────────────────────────────────

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

local response   if response=$(curl "${curl_args[@]}" "$url" 2>&1); then

if response=$(curl "${curl_args[@]}" "$url" 2>&1); then

echo "$response" | jq --arg query "$query" --arg backend "loki" --arg tool "curl" '{

[Credential-related source omitted]

[Credential-related source omitted]

if [[ -n "$label" ]]; then       local response       response=$(curl "${curl_args[@]}" "${LOKI_ADDR}/loki/api/v1/label/${label}/values" 2>&1) || true

local response       response=$(curl "${curl_args[@]}" "${LOKI_ADDR}/loki/api/v1/label/${label}/values" 2>&1) || true       echo "$response" | jq --arg label "$label" '{

response=$(curl "${curl_args[@]}" "${LOKI_ADDR}/loki/api/v1/label/${label}/values" 2>&1) || true

else       local response       response=$(curl "${curl_args[@]}" "${LOKI_ADDR}/loki/api/v1/labels" 2>&1) || true

local response       response=$(curl "${curl_args[@]}" "${LOKI_ADDR}/loki/api/v1/labels" 2>&1) || true       echo "$response" | jq '{

response=$(curl "${curl_args[@]}" "${LOKI_ADDR}/loki/api/v1/labels" 2>&1) || true

# WebSocket tail via curl is complex; fallback to polling recent

#!/usr/bin/env bash

if command -v logcli &>/dev/null; then       loki_tool="logcli"     elif command -v curl &>/dev/null; then

loki_tool="logcli"     elif command -v curl &>/dev/null; then       loki_tool="curl"

elif command -v curl &>/dev/null; then

loki_tool="curl"     else       loki_tool="missing"

"error": "No backends configured. Set environment variables for at least one backend.",       "help": {         "loki": "export LOKI_ADDR=http://loki:3100",

"help": {         "loki": "export LOKI_ADDR=http://loki:3100",         "elasticsearch": "export ELASTICSEARCH_URL=https://es:9200",

"loki": "export LOKI_ADDR=http://loki:3100",

"elasticsearch": "export ELASTICSEARCH_URL=https://es:9200",

[Credential-related source omitted]

<sub>Powered by Anvil AI ✈<U+FE0F> | [Report an issue](https://github.com/cacheforge-ai/cacheforge-skills/issues)</sub>

This skill makes API calls ONLY to the configured LLM provider: - **Anthropic:** `https://api.anthropic.com/v1/messages` (or custom `ANTHROPIC_API_URL`)

- **Anthropic:** `https://api.anthropic.com/v1/messages` (or custom `ANTHROPIC_API_URL`)

- **OpenAI:** `https://api.openai.com/v1/chat/completions` (or custom `OPENAI_API_URL`)

[Credential-related source omitted]

#!/usr/bin/env bash

# ── Validate API URL base ───────────────────────────────── # Allows only http(s) URLs to prevent unsafe curl schemes.

# Allows only http(s) URLs to prevent unsafe curl schemes.

local label="${2:-URL}"   case "$url" in     http://*|https://*) ;;

case "$url" in     http://*|https://*) ;;     *)

http://*|https://*) ;;

#!/usr/bin/env bash

[Credential-related source omitted]

[Credential-related source omitted]

local anthropic_base     anthropic_base="${ANTHROPIC_API_URL:-https://api.anthropic.com}"

anthropic_base="${ANTHROPIC_API_URL:-https://api.anthropic.com}"

validate_http_url "$anthropic_base" "ANTHROPIC_API_URL"

local response     response=$(printf '%s' "$request_body" | curl -sS \

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

local openai_base     openai_base="${OPENAI_API_URL:-https://api.openai.com}"

openai_base="${OPENAI_API_URL:-https://api.openai.com}"

validate_http_url "$openai_base" "OPENAI_API_URL"

local response     response=$(printf '%s' "$request_body" | curl -sS \

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

#!/usr/bin/env bash

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

local anthropic_base     anthropic_base="${ANTHROPIC_API_URL:-https://api.anthropic.com}"     validate_http_url "$anthropic_base" "ANTHROPIC_API_URL"

anthropic_base="${ANTHROPIC_API_URL:-https://api.anthropic.com}"

validate_http_url "$anthropic_base" "ANTHROPIC_API_URL"

local response     response=$(printf '%s' "$request_body" | curl -sS \

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

local openai_base     openai_base="${OPENAI_API_URL:-https://api.openai.com}"     validate_http_url "$openai_base" "OPENAI_API_URL"

openai_base="${OPENAI_API_URL:-https://api.openai.com}"

validate_http_url "$openai_base" "OPENAI_API_URL"

local response     response=$(printf '%s' "$request_body" | curl -sS \

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

#!/usr/bin/env bash

${BOLD}REQUIREMENTS${RESET}     • bash, jq, python3, curl     • ANTHROPIC_API_KEY or OPENAI_API_KEY

[Credential-related source omitted]

require_jq require_cmd python3 "Install Python 3: apt install python3 / brew install python3" require_cmd curl "Install curl: apt install curl / brew install curl"

require_cmd curl "Install curl: apt install curl / brew install curl"

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

trap 'rm -rf "$WORKDIR"' EXIT

#!/usr/bin/env bash

Format follows [Keep a Changelog](https://keepachangelog.com/).

- HTTPS-only enforcement — refuses non-HTTPS URLs - Retry logic — 5xx and network errors get 1 retry with 2-second backoff - 10-second curl timeout per API call

- Retry logic — 5xx and network errors get 1 retry with 2-second backoff - 10-second curl timeout per API call - Structured JSON output for all subcommands (machine-parseable)

- 10-second curl timeout per API call

| Failure | Detection | Behavior | User-Visible Output | |---------|-----------|----------|---------------------| | **PagerDuty API unreachable** | `curl` timeout (10s) or connection refused | Retry once after 2s backoff. If still failing, 

|---------|-----------|----------|---------------------| | **PagerDuty API unreachable** | `curl` timeout (10s) or connection refused | Retry once after 2s backoff. If still failing, exit with error. | `{"error": "PagerDuty API is unreachab

| **PagerDuty API unreachable** | `curl` timeout (10s) or connection refused | Retry once after 2s backoff. If still failing, exit with error. | `{"error": "PagerDuty API is unreachable. Check https://status.pagerduty.com/"}` |

[Credential-related source omitted]

| **Insufficient permissions** | HTTP 403 response | Immediate failure, no retry | `{"error": "Access denied (HTTP 403). Your API key (****xxxx) lacks permission for this operation."}` | | **Rate limited** | HTTP 429 response | Immediate fa

| **Rate limited** | HTTP 429 response | Immediate failure, no retry (429 is unlikely with 960 req/min limit) | `{"error": "PagerDuty rate limit hit (HTTP 429). Wait 30 seconds and retry."}` | | **Server error** | HTTP 5xx response | Retry 

| **Server error** | HTTP 5xx response | Retry once after 2s backoff | After 2 attempts: `{"error": "PagerDuty API error (HTTP 5xx). Check https://status.pagerduty.com/"}` |

[Credential-related source omitted]

| Component | Timeout | Configured Via | |-----------|---------|----------------| | **curl connection + transfer** | 10 seconds | `--max-time 10` in `curl` args |

|-----------|---------|----------------| | **curl connection + transfer** | 10 seconds | `--max-time 10` in `curl` args | | **Total per-subcommand (worst case)** | ~24 seconds | 2 attempts × 10s timeout + 2s backoff + jq processing |

| **curl connection + transfer** | 10 seconds | `--max-time 10` in `curl` args |

### API version pinning The tool targets PagerDuty REST API **v2** (the current stable version as of 2026). PagerDuty has not announced deprecation plans. The base URL `https://api.pagerduty.com` routes to v2 by default.

The tool targets PagerDuty REST API **v2** (the current stable version as of 2026). PagerDuty has not announced deprecation plans. The base URL `https://api.pagerduty.com` routes to v2 by default.

| Rate limit proximity | Watch for 429 errors (rare with 960/min limit) | | API latency | Time the subcommand execution; > 5s suggests PD issues | | PagerDuty status | https://status.pagerduty.com/ |

| API latency | Time the subcommand execution; > 5s suggests PD issues | | PagerDuty status | https://status.pagerduty.com/ | | Tool availability | Run `smoke.sh` periodically |

| PagerDuty status | https://status.pagerduty.com/ |

<sub>Operability documentation for pager-triage v0.1.1 · [Anvil AI](https://labs.anvil-ai.io)</sub>

[![Version](https://img.shields.io/badge/version-0.1.1-blue)]()

[![License](https://img.shields.io/badge/license-MIT-green)]()

[![Author](https://img.shields.io/badge/by-Anvil%20AI-orange)]()

[Credential-related source omitted]

| Skill | What It Adds | |-------|-------------| | **[prom-query](https://clawhub.com/skills/prom-query)** | Query Prometheus metrics — correlate incidents with CPU, memory, latency, error rates |

|-------|-------------| | **[prom-query](https://clawhub.com/skills/prom-query)** | Query Prometheus metrics — correlate incidents with CPU, memory, latency, error rates | | **[kube-medic](https://clawhub.com/skills/kube-medic)** | Kubernet

| **[prom-query](https://clawhub.com/skills/prom-query)** | Query Prometheus metrics — correlate incidents with CPU, memory, latency, error rates |

| **[kube-medic](https://clawhub.com/skills/kube-medic)** | Kubernetes cluster health — check pods, restarts, OOMKills, node status |

| **[log-dive](https://clawhub.com/skills/log-dive)** | Log search — find error patterns around incident timeframes |

[Credential-related source omitted]

<p align="center">   <strong>Built by <a href="https://labs.anvil-ai.io">Anvil AI</a></strong><br>

<strong>Built by <a href="https://labs.anvil-ai.io">Anvil AI</a></strong><br>

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

### URL Validation The script enforces HTTPS-only: any URL not starting with `https://` is rejected before any network call is made.

The script enforces HTTPS-only: any URL not starting with `https://` is rejected before any network call is made.

<sub>Security documentation for pager-triage v0.1.1 · [Anvil AI](https://labs.anvil-ai.io)</sub>

[Credential-related source omitted]

[Credential-related source omitted]

<sub>Powered by [Anvil AI](https://labs.anvil-ai.io) · Built for the engineer who gets paged at 3am</sub>

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

"https://api.pagerduty.com/incidents?statuses[]=triggered&statuses[]=acknowledged&sort_by=urgency&limit=25&include[]=assignees&include[]=services"

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

"https://api.pagerduty.com/incidents/$INCIDENT_ID?include[]=assignees&include[]=acknowledgers&include[]=conference_bridge"

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

"https://api.pagerduty.com/incidents/$INCIDENT_ID/log_entries?limit=25&include[]=channels"

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

"https://api.pagerduty.com/incidents/$INCIDENT_ID/alerts?limit=25"

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

"https://api.pagerduty.com/incidents/$INCIDENT_ID/notes"

[Credential-related source omitted]

[Credential-related source omitted]

"https://api.pagerduty.com/oncalls?earliest=true&include[]=users&include[]=schedules&include[]=escalation_policies"

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

-H "From: $PAGERDUTY_EMAIL" \   -H "Content-Type: application/json" \   "https://api.pagerduty.com/incidents/$INCIDENT_ID" \

-H "Content-Type: application/json" \   "https://api.pagerduty.com/incidents/$INCIDENT_ID" \   -d '{"incident": {"type": "incident_reference", "status": "acknowledged"}}'

"https://api.pagerduty.com/incidents/$INCIDENT_ID" \

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

-H "From: $PAGERDUTY_EMAIL" \   -H "Content-Type: application/json" \   "https://api.pagerduty.com/incidents/$INCIDENT_ID" \

-H "Content-Type: application/json" \   "https://api.pagerduty.com/incidents/$INCIDENT_ID" \   -d '{"incident": {"type": "incident_reference", "status": "resolved"}}'

"https://api.pagerduty.com/incidents/$INCIDENT_ID" \

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

-H "From: $PAGERDUTY_EMAIL" \   -H "Content-Type: application/json" \   "https://api.pagerduty.com/incidents/$INCIDENT_ID/notes" \

-H "Content-Type: application/json" \   "https://api.pagerduty.com/incidents/$INCIDENT_ID/notes" \   -d '{"note": {"content": "..."}}'

"https://api.pagerduty.com/incidents/$INCIDENT_ID/notes" \

[Credential-related source omitted]

[Credential-related source omitted]

"https://api.pagerduty.com/services?include[]=integrations&limit=100"

[Credential-related source omitted]

[Credential-related source omitted]

"https://api.pagerduty.com/incidents?since=$SINCE&until=now&service_ids[]=$SERVICE_ID&limit=25&sort_by=created_at:desc"

[Credential-related source omitted]

| Subcommand | OpsGenie Endpoint | |------------|-------------------| | `pd_incidents` | `GET https://api.opsgenie.com/v2/alerts?status=open` |

|------------|-------------------| | `pd_incidents` | `GET https://api.opsgenie.com/v2/alerts?status=open` | | `pd_incident_detail` | `GET https://api.opsgenie.com/v2/alerts/{id}` |

| `pd_incidents` | `GET https://api.opsgenie.com/v2/alerts?status=open` |

| `pd_incident_detail` | `GET https://api.opsgenie.com/v2/alerts/{id}` |

| `pd_oncall` | `GET https://api.opsgenie.com/v2/schedules/{id}/on-calls` |

| `pd_incident_ack` | `POST https://api.opsgenie.com/v2/alerts/{id}/acknowledge` |

| `pd_incident_resolve` | `POST https://api.opsgenie.com/v2/alerts/{id}/close` |

| `pd_incident_note` | `POST https://api.opsgenie.com/v2/alerts/{id}/notes` |

| `pd_services` | `GET https://api.opsgenie.com/v1/services` |

[Credential-related source omitted]

| Failure | Detection | Fallback | |---------|-----------|----------| | PagerDuty API unreachable | HTTP timeout (10s) or 5xx response | Retry once after 2s. If still failing, report "PagerDuty API is unreachable. Check https://status.pager

|---------|-----------|----------| | PagerDuty API unreachable | HTTP timeout (10s) or 5xx response | Retry once after 2s. If still failing, report "PagerDuty API is unreachable. Check https://status.pagerduty.com/" | | Invalid API key | HT

| PagerDuty API unreachable | HTTP timeout (10s) or 5xx response | Retry once after 2s. If still failing, report "PagerDuty API is unreachable. Check https://status.pagerduty.com/" |

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

### Key Implementation Details - PagerDuty API v2 base URL: `https://api.pagerduty.com`

- PagerDuty API v2 base URL: `https://api.pagerduty.com`

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

./scripts/pager-triage.sh detail "P123;rm -rf /"

# Verify curl and jq are required

which curl jq

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

# Simulate by pointing to a non-routable address (don't actually do this in CI) # The script has a 10-second curl timeout. After 1 retry with 2s backoff,

# The script has a 10-second curl timeout. After 1 retry with 2s backoff,

<sub>Testing documentation for pager-triage v0.1.1 · [Anvil AI](https://labs.anvil-ai.io)</sub>

#!/usr/bin/env bash

readonly PD_API_BASE="https://api.pagerduty.com"

check_deps() {   for cmd in curl jq; do

for cmd in curl jq; do

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

if [[ "$url" != https://* ]]; then

[Credential-related source omitted]

while (( attempt < max_attempts )); do     response=$(curl "${curl_args[@]}" "$url" 2>/dev/null) || {

response=$(curl "${curl_args[@]}" "$url" 2>/dev/null) || {

continue       fi       die "PagerDuty API is unreachable. Check https://status.pagerduty.com/"

fi       die "PagerDuty API is unreachable. Check https://status.pagerduty.com/"     }

die "PagerDuty API is unreachable. Check https://status.pagerduty.com/"

[Credential-related source omitted]

[Credential-related source omitted]

continue         fi         die "PagerDuty API error (HTTP $http_code). Check https://status.pagerduty.com/"

fi         die "PagerDuty API error (HTTP $http_code). Check https://status.pagerduty.com/"         ;;

die "PagerDuty API error (HTTP $http_code). Check https://status.pagerduty.com/"

;;       *)         die "PagerDuty API returned unexpected HTTP $http_code. Check https://developer.pagerduty.com/docs/ for details."

*)         die "PagerDuty API returned unexpected HTTP $http_code. Check https://developer.pagerduty.com/docs/ for details."         ;;

die "PagerDuty API returned unexpected HTTP $http_code. Check https://developer.pagerduty.com/docs/ for details."

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

#!/usr/bin/env bash

if command -v curl &>/dev/null; then

pass "curl is available"

else   fail "curl is not installed" fi

fail "curl is not installed"

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

if output=$("$TOOL" detail 'P123;rm -rf /' 2>&1); then

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),

and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

![Version](https://img.shields.io/badge/version-1.0.1-blue)

![License](https://img.shields.io/badge/license-MIT-green)

![Read-only](https://img.shields.io/badge/operations-read--only-brightgreen)

export PROMETHEUS_URL=https://prometheus.your-company.com

[Credential-related source omitted]

| Skill | What it does | |-------|-------------| | **[vibe-check](https://clawhub.com/skills/vibe-check)** | AI code quality + security review scorecard. |

|-------|-------------| | **[vibe-check](https://clawhub.com/skills/vibe-check)** | AI code quality + security review scorecard. | | **[rug-checker](https://clawhub.com/skills/rug-checker)** | Solana token rug-pull risk analysis. |

| **[vibe-check](https://clawhub.com/skills/vibe-check)** | AI code quality + security review scorecard. |

| **[rug-checker](https://clawhub.com/skills/rug-checker)** | Solana token rug-pull risk analysis. |

| **[dep-audit](https://clawhub.com/skills/dep-audit)** | Dependency vulnerability auditing across npm/pip/cargo/go. |

| **[prom-query](https://clawhub.com/skills/prom-query)** | This skill — Prometheus query + alert triage. |

Built by **[Anvil AI](https://labs.anvil-ai.io/)** — [See what our agents are building](https://labs.anvil-ai.io).

Skills built and battle-tested by [Anvil AI](https://labs.anvil-ai.io) on a live 5-agent autonomous swarm.

3. **Input validation.**    - `PROMETHEUS_URL` is validated to use only `http://` or `https://` schemes    - PromQL queries are passed via `--data-urlencode` to curl (proper URL encoding)

- `PROMETHEUS_URL` is validated to use only `http://` or `https://` schemes    - PromQL queries are passed via `--data-urlencode` to curl (proper URL encoding)    - All JSON construction uses `jq --arg` — no string interpolation or template

- PromQL queries are passed via `--data-urlencode` to curl (proper URL encoding)

- The skill connects only to the URL specified in `PROMETHEUS_URL` - No DNS rebinding protection beyond what curl provides

- No DNS rebinding protection beyond what curl provides

The [PromLabs demo server](https://demo.promlabs.com) is a public Prometheus instance with sample data. Use it for testing without any local setup:

export PROMETHEUS_URL=https://demo.promlabs.com

# Set URL export PROMETHEUS_URL=http://localhost:9090

export PROMETHEUS_URL=http://localhost:9090

# Invalid PromQL export PROMETHEUS_URL=https://demo.promlabs.com

export PROMETHEUS_URL=https://demo.promlabs.com

# Unreachable server PROMETHEUS_URL=http://192.0.2.1:9090 bash scripts/prom-query.sh query 'up' 2>&1 | grep -qi "cannot reach" && echo "✅ Unreachable handled"

PROMETHEUS_URL=http://192.0.2.1:9090 bash scripts/prom-query.sh query 'up' 2>&1 | grep -qi "cannot reach" && echo "✅ Unreachable handled"

# Request a very long range with tiny step — should auto-downsample export PROMETHEUS_URL=https://demo.promlabs.com

export PROMETHEUS_URL=https://demo.promlabs.com

#!/usr/bin/env bash

ENVIRONMENT:   PROMETHEUS_URL    (required) Base URL, e.g. https://prometheus.example.com

PROMETHEUS_URL    (required) Base URL, e.g. https://prometheus.example.com

validate_env() {   if [[ -z "${PROMETHEUS_URL:-}" ]]; then     die "PROMETHEUS_URL is not set. Set it to your Prometheus server URL, e.g.:\n  export PROMETHEUS_URL=https://prometheus.example.com\n\nCompatible with Prometheus, Thanos, Mimir,

if [[ -z "${PROMETHEUS_URL:-}" ]]; then     die "PROMETHEUS_URL is not set. Set it to your Prometheus server URL, e.g.:\n  export PROMETHEUS_URL=https://prometheus.example.com\n\nCompatible with Prometheus, Thanos, Mimir, and VictoriaMetric

die "PROMETHEUS_URL is not set. Set it to your Prometheus server URL, e.g.:\n  export PROMETHEUS_URL=https://prometheus.example.com\n\nCompatible with Prometheus, Thanos, Mimir, and VictoriaMetrics."

case "$PROMETHEUS_URL" in     http://*|https://*)

http://*|https://*)

# Build curl auth args (never leak token to stdout)

[Credential-related source omitted]

[Credential-related source omitted]

# Use a temp file to capture curl stderr

trap 'rm -f "$tmp"' RETURN

# Re-build curl args without stdin header trick for simplicity

[Credential-related source omitted]

[Credential-related source omitted]

if ! response=$(curl "${final_args[@]}" 2>"$tmp"); then

| Source | What It Provides | |--------|-----------------| | [Rugcheck.xyz](https://rugcheck.xyz) | Risk flags, holder analysis, LP lock status, insider detection |

|--------|-----------------| | [Rugcheck.xyz](https://rugcheck.xyz) | Risk flags, holder analysis, LP lock status, insider detection | | [DexScreener](https://dexscreener.com) | Market data, pricing, liquidity, token resolution |

| [Rugcheck.xyz](https://rugcheck.xyz) | Risk flags, holder analysis, LP lock status, insider detection |

| [DexScreener](https://dexscreener.com) | Market data, pricing, liquidity, token resolution |

| [Solana RPC](https://api.mainnet-beta.solana.com) | On-chain mint/freeze authority verification |

| Skill | What it does | |-------|-------------| | **[vibe-check](https://clawhub.com/skills/vibe-check)** | AI code quality + security review scorecard. |

|-------|-------------| | **[vibe-check](https://clawhub.com/skills/vibe-check)** | AI code quality + security review scorecard. | | **[prom-query](https://clawhub.com/skills/prom-query)** | Prometheus metrics + alert triage from natural la

| **[vibe-check](https://clawhub.com/skills/vibe-check)** | AI code quality + security review scorecard. |

| **[prom-query](https://clawhub.com/skills/prom-query)** | Prometheus metrics + alert triage from natural language. |

| **[dep-audit](https://clawhub.com/skills/dep-audit)** | Unified dependency vulnerability auditing (npm, pip, Cargo, Go) |

| **[rug-checker](https://clawhub.com/skills/rug-checker)** | This skill — Solana token rug-pull risk analysis |

Built by **[Anvil AI](https://labs.anvil-ai.io/)** — [See what our agents are building](https://labs.anvil-ai.io).

Skills built and battle-tested by [Anvil AI](https://labs.anvil-ai.io) on a live 5-agent autonomous swarm.

The `SOLANA_RPC` endpoint defaults to the public Solana mainnet-beta RPC (`https://api.mainnet-beta.solana.com`) but can be overridden via the `SOLANA_RPC_URL` environment variable. A malicious value could point to a server that returns fak

# Verify dependencies command -v bash && command -v curl && command -v jq && command -v bc && echo "OK"

command -v bash && command -v curl && command -v jq && command -v bc && echo "OK"

# Verify API connectivity curl -s "https://api.rugcheck.xyz/v1/stats/recent" | jq 'length'

curl -s "https://api.rugcheck.xyz/v1/stats/recent" | jq 'length'

curl -s "https://api.dexscreener.com/tokens/v1/solana/DezXAZ8z7PnrnRJjz3wXBoRgixCa6xjnB7YaB1pPB263" | jq '.[0].baseToken.name'

| BONK | `DezXAZ8z7PnrnRJjz3wXBoRgixCa6xjnB7YaB1pPB263` | Blue chip meme | 🟢 SAFE | | USDC | `EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v` | Stablecoin | 🟠 WARNING (has compliance authorities) | | Recent pump.fun | Find via `curl -s "https

| Recent pump.fun | Find via `curl -s "https://api.rugcheck.xyz/v1/stats/new_tokens" \| jq '.[0].mint'` | Brand new token | 🟡-⛔ varies |

[Credential-related source omitted]

[Credential-related source omitted]

#!/usr/bin/env bash

#!/usr/bin/env bash

trap 'rm -f "${_CF_TMPFILES[@]}" 2>/dev/null' EXIT

readonly DEXSCREENER_BASE="https://api.dexscreener.com"

readonly RUGCHECK_BASE="https://api.rugcheck.xyz/v1"

readonly SOLANA_RPC="${SOLANA_RPC_URL:-https://api.mainnet-beta.solana.com}"

cf_check_deps() {   local missing=()   for cmd in curl jq bc; do

local missing=()   for cmd in curl jq bc; do     if ! command -v "$cmd" &>/dev/null; then

for cmd in curl jq bc; do

cf_error "Install with: sudo apt install ${missing[*]}  (or brew install ${missing[*]})"

# Generic GET with retries, timeout, and rate limiting. # Usage: cf_http_get "https://..." ["domain_for_rate_limit" [max_per_min]]

# Usage: cf_http_get "https://..." ["domain_for_rate_limit" [max_per_min]]

local tmpfile     tmpfile=$(cf_mktemp)     http_code=$(curl -s -o "$tmpfile" -w "%{http_code}" \

tmpfile=$(cf_mktemp)     http_code=$(curl -s -o "$tmpfile" -w "%{http_code}" \       --max-time "$timeout" \

http_code=$(curl -s -o "$tmpfile" -w "%{http_code}" \

rm -f "$tmpfile"

tmpfile=$(cf_mktemp)     local http_code     http_code=$(curl -s -o "$tmpfile" -w "%{http_code}" \

local http_code     http_code=$(curl -s -o "$tmpfile" -w "%{http_code}" \       --max-time "$timeout" \

http_code=$(curl -s -o "$tmpfile" -w "%{http_code}" \

rm -f "$tmpfile"

#!/usr/bin/env bash

#!/usr/bin/env bash

echo "## 🔗 Links" echo "" echo "- [DexScreener](https://dexscreener.com/solana/${ADDRESS})"

echo "" echo "- [DexScreener](https://dexscreener.com/solana/${ADDRESS})" echo "- [Rugcheck.xyz](https://rugcheck.xyz/tokens/${ADDRESS})"

echo "- [DexScreener](https://dexscreener.com/solana/${ADDRESS})"

echo "- [Rugcheck.xyz](https://rugcheck.xyz/tokens/${ADDRESS})"

echo "- [Solscan](https://solscan.io/token/${ADDRESS})"

echo "- [Birdeye](https://birdeye.so/token/${ADDRESS}?chain=solana)"

_🛡<U+FE0F> Powered by [Anvil AI](https://labs.anvil-ai.io)_

Or clone from [GitHub](https://github.com/cacheforge-ai/cacheforge-skills).

Built by **[Anvil AI](https://labs.anvil-ai.io/)** — [See what our agents are building](https://labs.anvil-ai.io).

author: Anvil AI license: MIT homepage: https://github.com/cacheforge-ai/cacheforge-skills

license: MIT homepage: https://github.com/cacheforge-ai/cacheforge-skills user-invocable: true

homepage: https://github.com/cacheforge-ai/cacheforge-skills

- discord   - discord-v2 metadata: {"openclaw":{"emoji":"🩺","homepage":"https://github.com/cacheforge-ai/cacheforge-skills","requires":{"bins":["bash","jq","openclaw"]}}}

- discord-v2 metadata: {"openclaw":{"emoji":"🩺","homepage":"https://github.com/cacheforge-ai/cacheforge-skills","requires":{"bins":["bash","jq","openclaw"]}}} ---

metadata: {"openclaw":{"emoji":"🩺","homepage":"https://github.com/cacheforge-ai/cacheforge-skills","requires":{"bins":["bash","jq","openclaw"]}}}

#!/usr/bin/env bash

#!/usr/bin/env bash

#!/usr/bin/env bash

#!/usr/bin/env bash

trap 'rm -rf "$LOCK_DIR"' EXIT

Built by **[Anvil AI](https://labs.anvil-ai.io/)** — [See what our agents are building](https://labs.anvil-ai.io).

Skills built and battle-tested by [Anvil AI](https://labs.anvil-ai.io) on a live 5-agent autonomous swarm.

rm -rf /tmp/tf-plan-review-* /tmp/tf-report.md

#!/usr/bin/env bash

json_error "$TF_BINARY not found. Please install it or set TF_BINARY to a valid binary path."     else       json_error "Neither 'terraform' nor 'tofu' found in PATH. Install Terraform: https://developer.hashicorp.com/terraform/install or O

else       json_error "Neither 'terraform' nor 'tofu' found in PATH. Install Terraform: https://developer.hashicorp.com/terraform/install or OpenTofu: https://opentofu.org/docs/intro/install/"     fi

json_error "Neither 'terraform' nor 'tofu' found in PATH. Install Terraform: https://developer.hashicorp.com/terraform/install or OpenTofu: https://opentofu.org/docs/intro/install/"

require_jq() {   command -v jq &>/dev/null || json_error "jq is required but not found. Install: https://jqlang.github.io/jq/download/"

command -v jq &>/dev/null || json_error "jq is required but not found. Install: https://jqlang.github.io/jq/download/"

trap "rm -f '$plan_json_file'" EXIT

![Vibe Score](https://img.shields.io/badge/vibe--score-73%2F100-yellow)

[Credential-related source omitted]

| 8 | 🔒 Security | 10% | eval(), exec(), hardcoded secrets, SQL injection |

![Vibe Score](https://img.shields.io/badge/vibe--score-42%2F100-red)

1. **api/handler.py:42** — `eval(user_input)` — Remote code execution vulnerability

| `api/handler.py` | 22 | F | 203 | eval() with user input — RCE vuln... |

> Use of eval() — potential code injection vulnerability

-    result = eval(user_input)

*🎭 Vibe Check v0.1.1 — 34 findings across 5 files* *Badge for your README:* `![Vibe Score](https://img.shields.io/badge/vibe--score-42%2F100-red)`

*Badge for your README:* `![Vibe Score](https://img.shields.io/badge/vibe--score-42%2F100-red)`

![Vibe Score](https://img.shields.io/badge/vibe--score-73%2F100-yellow)

- `eval()` / `exec()` usage

[Credential-related source omitted]

[Credential-related source omitted]

| Skill | What it does | |-------|-------------| | **[vibe-check](https://clawhub.com/skills/vibe-check)** | This skill — AI code quality + security review scorecard. |

|-------|-------------| | **[vibe-check](https://clawhub.com/skills/vibe-check)** | This skill — AI code quality + security review scorecard. | | **[rug-checker](https://clawhub.com/skills/rug-checker)** | Solana token rug-pull risk analysi

| **[vibe-check](https://clawhub.com/skills/vibe-check)** | This skill — AI code quality + security review scorecard. |

| **[rug-checker](https://clawhub.com/skills/rug-checker)** | Solana token rug-pull risk analysis. |

| **[dep-audit](https://clawhub.com/skills/dep-audit)** | Dependency vulnerability auditing across npm/pip/cargo/go. |

| **[prom-query](https://clawhub.com/skills/prom-query)** | Prometheus metrics + alert triage from natural language. |

Built by **[Anvil AI](https://labs.anvil-ai.io/)** — [See what our agents are building](https://labs.anvil-ai.io).

Skills built and battle-tested by [Anvil AI](https://labs.anvil-ai.io) on a live 5-agent autonomous swarm.

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

| Security | 10% | eval(), exec(), hardcoded secrets, SQL injection |

- **The report is the star.** Present it in full — it's designed to look great. - After presenting, offer to run `--fix` mode if they didn't already. - Suggest the README badge: `![Vibe Score](https://img.shields.io/badge/vibe--score-XX%2F1

- After presenting, offer to run `--fix` mode if they didn't already. - Suggest the README badge: `![Vibe Score](https://img.shields.io/badge/vibe--score-XX%2F100-COLOR)` - For large codebases, suggest focusing on specific directories or us

- Suggest the README badge: `![Vibe Score](https://img.shields.io/badge/vibe--score-XX%2F100-COLOR)`

python3 --version git --version curl --version

curl --version

[Credential-related source omitted]

[Credential-related source omitted]

rm -f /tmp/vibe-check-report.md

eval("1+1")

rm -rf "$TMP_REPO"

rm -f /tmp/vibe-check-report.md /tmp/vibe-check-diff.md

#!/usr/bin/env bash

[Credential-related source omitted]

8. **security** (weight 10%): eval(), exec(), hardcoded secrets/passwords, SQL string concat, unsafe deserialization, path traversal

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

-H "content-type: application/json" \       -d "{\"model\":\"claude-sonnet-4-20250514\",\"max_tokens\":4096,\"messages\":[{\"role\":\"user\",\"content\":${escaped_prompt}}]}" \       https://api.anthropic.com/v1/messages 2>/dev/null | pytho

-d "{\"model\":\"claude-sonnet-4-20250514\",\"max_tokens\":4096,\"messages\":[{\"role\":\"user\",\"content\":${escaped_prompt}}]}" \       https://api.anthropic.com/v1/messages 2>/dev/null | python3 -c " import json, sys

https://api.anthropic.com/v1/messages 2>/dev/null | python3 -c "

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

-H "content-type: application/json" \       -d "{\"model\":\"gpt-4o\",\"messages\":[{\"role\":\"user\",\"content\":${escaped_prompt}}],\"max_tokens\":4096}" \       https://api.openai.com/v1/chat/completions 2>/dev/null | python3 -c "

-d "{\"model\":\"gpt-4o\",\"messages\":[{\"role\":\"user\",\"content\":${escaped_prompt}}],\"max_tokens\":4096}" \       https://api.openai.com/v1/chat/completions 2>/dev/null | python3 -c " import json, sys

https://api.openai.com/v1/chat/completions 2>/dev/null | python3 -c "

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

'message': 'Use of eval() — potential code injection vulnerability'

'message': 'Use of exec() — potential code injection vulnerability'

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

#!/usr/bin/env bash

[Credential-related source omitted]

[Credential-related source omitted]

#!/usr/bin/env bash

#!/usr/bin/env bash

trap "rm -f '$RESULTS_FILE'" EXIT

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

badge_score = str(overall_score) badge_url = f'https://img.shields.io/badge/vibe--score-{badge_score}%2F100-{badge_color}'

badge_url = f'https://img.shields.io/badge/vibe--score-{badge_score}%2F100-{badge_color}'

#!/usr/bin/env bash

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

trap "rm -f '$FILES_LIST'" EXIT

trap "rm -f '$FILES_LIST' '$ANALYSIS_FILE'" EXIT

Executable file

[Credential-related source omitted]

API_URL = "http://localhost:8080"

result = eval(data["query"])

Executable file