[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"extension-cli-netdata-netflow-plugin-zh-CN":3,"guides-for-netdata-netflow-plugin":624,"similar-k171edjcsawrj9w6br0a6v5m5586mf70-zh-CN":625},{"_creationTime":4,"_id":5,"children":6,"community":7,"display":9,"evaluation":14,"identity":247,"isFallback":231,"parentExtension":251,"providers":252,"relations":257,"repo":259,"tags":621,"workflow":622},1778694578248.107,"k171edjcsawrj9w6br0a6v5m5586mf70",[],{"reviewCount":8},0,{"description":10,"installMethods":11,"name":12,"sourceUrl":13},"The fastest path to AI-powered full stack observability, even for lean teams.",{"cargo":12},"netflow-plugin","https://github.com/netdata/netdata",{"_creationTime":15,"_id":16,"extensionId":5,"locale":17,"result":18,"trustSignals":229,"workflow":245},1778694889363.9526,"kn7c194nsmk84br5313wzcxzp586n677","en",{"checks":19,"evaluatedAt":197,"extensionSummary":198,"features":199,"nonGoals":205,"promptVersionExtension":209,"promptVersionScoring":210,"purpose":211,"rationale":212,"score":213,"summary":214,"tags":215,"targetMarket":222,"tier":223,"useCases":224},[20,25,28,31,35,38,43,47,50,53,57,61,64,68,71,74,77,80,83,86,90,94,98,102,106,109,112,115,119,122,125,128,131,134,137,141,145,149,152,156,159,162,165,168,171,174,177,180,183,186,190,193],{"category":21,"check":22,"severity":23,"summary":24},"Practical Utility","Problem relevance","pass","The description clearly states the problem of achieving AI-powered observability quickly, even for lean teams, which is a concrete pain point.",{"category":21,"check":26,"severity":23,"summary":27},"Unique selling proposition","The extension's focus on NetFlow/IPFIX/sFlow ingestion and storage, with features like journal tiers and enrichment, offers significant value beyond a basic LLM prompt for observability.",{"category":21,"check":29,"severity":23,"summary":30},"Production readiness","The tool is a production-ready component for Netdata, handling ingestion, storage, and querying of network flow data, covering a complete lifecycle for its stated purpose.",{"category":32,"check":33,"severity":23,"summary":34},"Scope","Single responsibility principle","The extension focuses solely on ingesting and querying network flow data, aligning with its name and description without extending into unrelated domains.",{"category":32,"check":36,"severity":23,"summary":37},"Description quality","The displayed description accurately and concisely reflects the extension's capability to provide AI-powered observability for network flows.",{"category":39,"check":40,"severity":41,"summary":42},"Invocation","Scoped tools","not_applicable","This is a CLI plugin for Netdata, not a general-purpose tool with individual commands exposed directly to an agent. The tool interface is not structured as discrete, selectable verbs for an agent.",{"category":44,"check":45,"severity":23,"summary":46},"Documentation","Configuration & parameter reference","The README provides detailed documentation for configuration options, including enabled toggles, journal directory resolution, GeoIP paths, decapsulation modes, timestamp sources, enrichment settings, and tier configurations.",{"category":32,"check":48,"severity":41,"summary":49},"Tool naming","This is a CLI plugin for Netdata and does not expose discrete tools with user-facing names for an agent to call. Its functionality is integrated into the Netdata ecosystem.",{"category":32,"check":51,"severity":41,"summary":52},"Minimal I/O surface","As a Netdata plugin, its I/O surface is managed internally and integrated into the Netdata agent's query and ingestion mechanisms, not exposed as distinct CLI tools with parameter schemas.",{"category":54,"check":55,"severity":23,"summary":56},"License","License usability","The LICENSE file clearly indicates the software is licensed under the GNU General Public License v3.0, a permissive OSS license.",{"category":58,"check":59,"severity":23,"summary":60},"Maintenance","Commit recency","The repository shows recent commits as of May 13, 2026, indicating active maintenance.",{"category":58,"check":62,"severity":23,"summary":63},"Dependency Management","The Cargo.toml file indicates standard Rust dependencies and workspace-defined versions, suggesting a managed dependency approach.",{"category":65,"check":66,"severity":23,"summary":67},"Security","Secret Management","The plugin handles network flow data and configuration, but the source code and README do not indicate any use or handling of sensitive secrets that would be echoed to stdout.",{"category":65,"check":69,"severity":23,"summary":70},"Injection","The plugin focuses on data ingestion and processing based on configuration and standard protocols; there is no indication of loading or executing untrusted third-party code or data as instructions.",{"category":65,"check":72,"severity":23,"summary":73},"Transitive Supply-Chain Grenades","The plugin uses standard Rust dependencies and does not fetch external content at runtime for execution or instruction parsing.",{"category":65,"check":75,"severity":23,"summary":76},"Sandbox Isolation","The plugin operates within the Netdata agent's environment and manages its own data files within the cache directory, with no indication of attempting to modify files outside its designated scope.",{"category":65,"check":78,"severity":23,"summary":79},"Sandbox escape primitives","The source code does not show any patterns indicative of detached processes or retry loops around denied tool calls, which are typical sandbox escape primitives.",{"category":65,"check":81,"severity":23,"summary":82},"Data Exfiltration","The plugin's purpose is network flow ingestion and analysis; there are no documented outbound calls for telemetry or submission of confidential data.",{"category":65,"check":84,"severity":23,"summary":85},"Hidden Text Tricks","The README and source code appear to be free of hidden steering tricks, invisible characters, or obfuscated content.",{"category":87,"check":88,"severity":23,"summary":89},"Hooks","Opaque code execution","The Rust source code is plain and readable, with no evidence of base64-encoded payloads, `eval` usage, or runtime script fetching.",{"category":91,"check":92,"severity":23,"summary":93},"Portability","Structural Assumption","Configuration paths are relative to Netdata's cache and config directories, and the README explicitly mentions resolution order, making it portable across different Netdata installations.",{"category":95,"check":96,"severity":23,"summary":97},"Trust","Issues Attention","In the last 90 days, 16 issues were opened and 16 were closed, indicating a closure rate of 50% and active maintainer engagement.",{"category":99,"check":100,"severity":23,"summary":101},"Versioning","Release Management","The `Cargo.toml` file specifies a `version.workspace = true`, indicating a version is managed at the workspace level, which implies meaningful versioning.",{"category":103,"check":104,"severity":23,"summary":105},"Code Execution","Validation","The plugin utilizes Rust's type system and libraries like `ipnet` for robust validation of network-related inputs.",{"category":65,"check":107,"severity":23,"summary":108},"Unguarded Destructive Operations","The plugin's primary function is data ingestion and analysis; it does not appear to perform destructive operations that would require confirmation gates.",{"category":103,"check":110,"severity":23,"summary":111},"Error Handling","The Rust source code uses `tracing` for logging and standard Rust error handling patterns, indicating robust error management.",{"category":103,"check":113,"severity":23,"summary":114},"Logging","The plugin integrates with `netdata-plugin-error` and uses `tracing` for logging, providing audit trails for operations and errors.",{"category":116,"check":117,"severity":23,"summary":118},"Compliance","GDPR","The plugin processes network flow data, which may contain IP addresses, but its function is aggregation and analysis, not submitting personal data to third parties without sanitization.",{"category":116,"check":120,"severity":23,"summary":121},"Target market","The extension handles network flow data universally and does not appear to be tied to any specific geographic or legal jurisdiction; it is globally applicable.",{"category":91,"check":123,"severity":23,"summary":124},"Runtime stability","The plugin is written in Rust and configured via standard YAML, making it portable across POSIX-compliant systems where Netdata runs.",{"category":44,"check":126,"severity":23,"summary":127},"README","The README file is comprehensive, detailing installation, configuration, performance benchmarks, and interpretation of results.",{"category":32,"check":129,"severity":41,"summary":130},"Tool surface size","This is a Netdata plugin integrated into the agent, not a CLI with distinct tools exposed to an agent for selection.",{"category":39,"check":132,"severity":41,"summary":133},"Overlapping near-synonym tools","This is a Netdata plugin, not a CLI tool that exposes multiple commands for an agent to select from.",{"category":44,"check":135,"severity":23,"summary":136},"Phantom features","All features described in the README, such as NetFlow/IPFIX/sFlow ingestion, journal tiers, and enrichment options, are supported by the code and configuration.",{"category":138,"check":139,"severity":41,"summary":140},"Install","Installation instruction","As a Netdata plugin, installation is managed by the Netdata agent's deployment process, not through standalone CLI commands or direct package installs.",{"category":142,"check":143,"severity":23,"summary":144},"Errors","Actionable error messages","The use of `tracing` and Rust's error handling suggests that errors will be reported with context and potentially remediation advice.",{"category":146,"check":147,"severity":23,"summary":148},"Execution","Pinned dependencies","The project uses Rust workspaces and standard dependency management, implying pinned versions and managed updates.",{"category":32,"check":150,"severity":41,"summary":151},"Dry-run preview","The plugin is primarily an ingestion and data storage component; it does not expose commands that perform state-changing operations requiring a dry-run mode.",{"category":153,"check":154,"severity":23,"summary":155},"Protocol","Idempotent retry & timeouts","The Rust implementation and use of Tokio suggest that operations will have timeouts and error handling for retries, though explicit idempotency is not directly verifiable from the README.",{"category":116,"check":157,"severity":23,"summary":158},"Telemetry opt-in","The plugin integrates with Netdata's core systems, and there is no indication of independent telemetry collection; any data reporting would be governed by Netdata's policies.",{"category":39,"check":160,"severity":41,"summary":161},"Hierarchical discoverable arguments","This extension is a Netdata plugin and does not expose a CLI interface with subcommands for an agent to discover.",{"category":39,"check":163,"severity":41,"summary":164},"Unknown-flag handling","This extension is a Netdata plugin and does not have a command-line interface with flags for an agent to interact with.",{"category":65,"check":166,"severity":41,"summary":167},"Secrets not in argv","This extension is a Netdata plugin and does not have a command-line interface that accepts secrets via arguments.",{"category":39,"check":169,"severity":41,"summary":170},"Parseable --version","This extension is a Netdata plugin and does not expose a standalone `--version` flag for agents to parse.",{"category":39,"check":172,"severity":41,"summary":173},"Flag precedence","This extension is a Netdata plugin and does not have a command-line interface with flags whose precedence needs to be documented.",{"category":39,"check":175,"severity":41,"summary":176},"Schema introspection","As a Netdata plugin, schema introspection is handled internally by the Netdata agent, not exposed via a CLI command.",{"category":39,"check":178,"severity":41,"summary":179},"Prompt bypass","This extension is a Netdata plugin and does not have interactive prompts that require bypass flags for automation.",{"category":138,"check":181,"severity":41,"summary":182},"No unnecessary global install","As a Netdata plugin, installation is managed by Netdata's package management and does not involve global CLI installs.",{"category":138,"check":184,"severity":41,"summary":185},"Pipe-to-shell installer","This is a Netdata plugin and is not installed via standalone pipe-to-shell scripts.",{"category":187,"check":188,"severity":41,"summary":189},"Output","Stream separation","As a Netdata plugin, its output is managed by the Netdata agent and not exposed as stdout/stderr streams for agent interaction.",{"category":187,"check":191,"severity":41,"summary":192},"Structured output mode","This extension is a Netdata plugin and does not provide structured output modes for agents to parse.",{"category":194,"check":195,"severity":23,"summary":196},"Subprocess behavior","Signal handling","The use of Tokio and standard Rust practices implies proper signal handling for graceful shutdown within the Netdata agent's runtime.",1778694889254,"This plugin integrates with the Netdata agent to ingest, store in journal tiers, and query NetFlow, IPFIX, and sFlow data. It supports various configuration options for decapsulation, timestamp sources, and enrichment, including GeoIP lookups and dynamic routing information.",[200,201,202,203,204],"NetFlow, IPFIX, sFlow ingestion","Journal-based data storage with configurable tiers","Optional enrichment with GeoIP and routing data","Performance benchmarking for ingestion pipelines","Integration with Netdata agent for monitoring",[206,207,208],"Acting as a standalone CLI tool.","Replacing dedicated network flow analysis platforms.","Providing direct agent interaction via arbitrary commands.","3.0.0","4.4.0","To provide AI-powered observability for network traffic by efficiently ingesting and analyzing flow data within the Netdata ecosystem.","The extension is a well-integrated, production-ready Netdata plugin with excellent documentation and active maintenance. It adheres to security best practices and has a clear scope.",98,"A robust and well-documented Netdata plugin for ingesting and analyzing network flow data.",[216,217,218,219,220,221],"netflow","ipfix","sflow","observability","network-monitoring","rust","global","verified",[225,226,227,228],"Monitoring network traffic patterns and anomalies.","Analyzing bandwidth usage and identifying top talkers.","Troubleshooting network performance issues.","Gathering detailed network flow data for security analysis.",{"codeQuality":230,"collectedAt":232,"documentation":233,"maintenance":236,"security":242,"testCoverage":244},{"hasLockfile":231},true,1778694871267,{"descriptionLength":234,"readmeSize":235},77,26316,{"closedIssues90d":237,"forks":238,"hasChangelog":239,"openIssues90d":237,"pushedAt":240,"stars":241},16,6433,false,1778692486000,78799,{"hasNpmPackage":239,"license":243,"smitheryVerified":239},"GPL-3.0",{"hasCi":231,"hasTests":231},{"updatedAt":246},1778694889364,{"basePath":248,"githubOwner":249,"githubRepo":249,"locale":17,"slug":12,"type":250},"src/crates/netflow-plugin","netdata","cli",null,{"evaluate":253,"extract":255},{"promptVersionExtension":209,"promptVersionScoring":210,"score":213,"tags":254,"targetMarket":222,"tier":223},[216,217,218,219,220,221],{"commitSha":256},"HEAD",{"repoId":258},"kd70yp91ybn40a638h3hzz6nbd86m2cw",{"_creationTime":260,"_id":258,"identity":261,"providers":262,"workflow":617},1778694565561.0132,{"githubOwner":249,"githubRepo":249,"sourceUrl":13},{"classify":263,"discover":594,"github":597},{"commitSha":256,"extensions":264},[265,285,308,321,348,356,377,387,414,422,430,457,470,497,519,531,541,548,556,565,581],{"basePath":266,"description":267,"displayName":268,"installMethods":269,"rationale":271,"selectedPaths":272,"source":283,"sourceLanguage":17,"type":284},".agents/skills/codacy-audit","Codacy Cloud workflow for this repository -- run Codacy's analyzers locally before `git push` (mirrors what Codacy CI runs), and fetch/cluster Codacy issues for any PR via the v3 API. Use when the user mentions Codacy, \"codacy analysis\", `codacy-analysis-cli`, \"codacy issues on PR\", \"fix codacy CI\", \"codacy markdownlint findings\", or any Codacy gate failing on a netdata-org PR. Ships scripts analyze-local.sh (docker/binary runner for codacy-analysis-cli) and pr-issues.sh (paginated v3 issue fetch + group-by tool/pattern/severity/file). Token-safe -- CODACY_TOKEN never reaches assistant-visible stdout. Read-only by design in the current SOW; write actions (mark FP, mark fixed) are deferred.","codacy-audit",{"claudeCode":270},"netdata/netdata","SKILL.md frontmatter at .agents/skills/codacy-audit/SKILL.md",[273,276,279,281],{"path":274,"priority":275},"SKILL.md","mandatory",{"path":277,"priority":278},"scripts/_lib.sh","low",{"path":280,"priority":278},"scripts/analyze-local.sh",{"path":282,"priority":278},"scripts/pr-issues.sh","rule","skill",{"basePath":286,"description":287,"displayName":288,"installMethods":289,"rationale":290,"selectedPaths":291,"source":283,"sourceLanguage":17,"type":284},".agents/skills/coverity-audit","Triage Coverity Scan defects (https://scan.coverity.com) for this project — fetch defect lists, fetch per-defect details, and apply triage decisions (Bug / FalsePositive / Intentional with severity, action, and a comment). Use when the user asks to \"review Coverity defects\", \"triage Coverity findings\", \"fetch Coverity outstanding\", or anything mentioning Coverity Scan, CIDs, or scan.coverity.com.","coverity-audit",{"claudeCode":270},"SKILL.md frontmatter at .agents/skills/coverity-audit/SKILL.md",[292,293,294,296,298,300,302,304,306],{"path":274,"priority":275},{"path":277,"priority":278},{"path":295,"priority":278},"scripts/fetch-details.sh",{"path":297,"priority":278},"scripts/fetch-table.sh",{"path":299,"priority":278},"scripts/finalize-defect.sh",{"path":301,"priority":278},"scripts/keepalive.sh",{"path":303,"priority":278},"scripts/prepare-defect.sh",{"path":305,"priority":278},"scripts/resolve-cid-to-diid.sh",{"path":307,"priority":278},"scripts/update-triage.sh",{"basePath":309,"description":310,"displayName":311,"installMethods":312,"rationale":313,"selectedPaths":314,"source":283,"sourceLanguage":17,"type":284},".agents/skills/graphql-audit","Triage GitHub Code Scanning alerts (CodeQL with security-extended suite) for this repository — list open alerts, dismiss as false positive / won't fix / used in tests, query via GitHub REST + GraphQL. Use when the user asks to \"review GitHub security alerts\", \"check CodeQL findings\", \"triage code scanning\", or anything mentioning Code Scanning, CodeQL, security-extended, or github.com/$repo/security/code-scanning.","graphql-audit",{"claudeCode":270},"SKILL.md frontmatter at .agents/skills/graphql-audit/SKILL.md",[315,316,317,319],{"path":274,"priority":275},{"path":277,"priority":278},{"path":318,"priority":278},"scripts/codeql-dismiss.sh",{"path":320,"priority":278},"scripts/codeql-list.sh",{"basePath":322,"description":323,"displayName":324,"installMethods":325,"rationale":326,"selectedPaths":327,"source":283,"sourceLanguage":17,"type":284},".agents/skills/integrations-lifecycle","Authoritative reference for Netdata's integrations pipeline -- how `metadata.yaml` drives per-integration pages, the `COLLECTORS.md`/`SECRETS.md`/`SERVICE-DISCOVERY.md` umbrellas, the `integrations.js` artifact consumed by the cloud-frontend, and per-integration `.md` files committed to the repo. Use when adding/modifying any integration (collector, exporter, agent or cloud notification, authentication, secretstore, service-discovery, log type, deploy method); editing `metadata.yaml`; checking whether `integrations/*.md` should be hand-edited; reading the four generator scripts under `integrations/`, schemas under `integrations/schemas/`, templates under `integrations/templates/`, the workflows `generate-integrations.yml` or `check-markdown.yml`; ibm.d modules where `metadata.yaml` is generated from `contexts.yaml`; the 5-file consistency rule (metadata.yaml + config_schema.json + stock conf + alerts + README move together).","integrations-lifecycle",{"claudeCode":270},"SKILL.md frontmatter at .agents/skills/integrations-lifecycle/SKILL.md",[328,329,332,334,336,338,340,342,344,346],{"path":274,"priority":275},{"path":330,"priority":331},"artifacts-and-banners.md","medium",{"path":333,"priority":331},"consistency.md",{"path":335,"priority":331},"description-authoring.md",{"path":337,"priority":331},"gotchas.md",{"path":339,"priority":331},"ibm-d.md",{"path":341,"priority":331},"in-app-contract.md",{"path":343,"priority":331},"per-type-matrix.md",{"path":345,"priority":331},"pipeline.md",{"path":347,"priority":331},"schema-reference.md",{"basePath":349,"description":350,"displayName":351,"installMethods":352,"rationale":353,"selectedPaths":354,"source":283,"sourceLanguage":17,"type":284},".agents/skills/learn-pr-preview","Use only when the user explicitly asks to build, run, preview, inspect, or validate learn.netdata.cloud locally using the contents of a PR or documentation branch before merge. Do not trigger for ordinary docs edits unless the user asks for a local Learn preview.","learn-pr-preview",{"claudeCode":270},"SKILL.md frontmatter at .agents/skills/learn-pr-preview/SKILL.md",[355],{"path":274,"priority":275},{"basePath":357,"description":358,"displayName":359,"installMethods":360,"rationale":361,"selectedPaths":362,"source":283,"sourceLanguage":17,"type":284},".agents/skills/learn-site-structure","Authoritative reference for how docs in this repo (and 5 other Netdata-org repos) become published pages on `learn.netdata.cloud`. Covers the `\u003Crepo>/docs/.map/map.yaml` source-of-truth (the actual lever -- filesystem path is irrelevant for routing), the live `ingest/ingest.py` orchestrator in the learn repo (NOT the legacy `ingest.js`), frontmatter injection, slug rules, sidebar autogeneration, MDX escape rules, versioning, the 4-mechanism redirect stack, the 6 source repositories, the every-3-hours CI ingest, Netlify deploy, and the `part_of_learn=True` opt-in for files hand-authored in the learn repo. Use when adding/moving/renaming/deleting a docs page; when a page on Learn looks wrong; when wondering whether to edit a doc here or in the learn repo; when reading `ingest.py`, `sidebars.js`, `docusaurus.config.js`, `static.toml`, `LegacyLearnCorrelateLinksWithGHURLs.json`, `netlify.toml`, the `\u003C!--startmeta` blocks in `.mdx` files, or the workflows `ingest.yml` and `daily-learn-link-check.yml`.","learn-site-structure",{"claudeCode":270},"SKILL.md frontmatter at .agents/skills/learn-site-structure/SKILL.md",[363,364,366,368,370,371,373,375],{"path":274,"priority":275},{"path":365,"priority":331},"authoring-boundary.md",{"path":367,"priority":331},"mapping.md",{"path":369,"priority":331},"mdx-rules.md",{"path":345,"priority":331},{"path":372,"priority":331},"pitfalls-and-gotchas.md",{"path":374,"priority":331},"redirects.md",{"path":376,"priority":331},"sidebars.md",{"basePath":378,"description":379,"displayName":380,"installMethods":381,"rationale":382,"selectedPaths":383,"source":283,"sourceLanguage":17,"type":284},".agents/skills/mirror-netdata-repos","Maintains a local mirror of Netdata-org source repositories at `${NETDATA_REPOS_DIR}` so AI assistants and developers can do cross-repo grep / code review locally without GitHub API round-trips and rate limits. Ships a vendored sync script (`scripts/sync-netdata-repos.sh`) that updates ~150 repos in two phases (resync existing on default branch, discover and clone new). Safety -- skips repos that have staged or modified changes; otherwise switches to the default branch and recursively updates submodules. Reset-to-default is intentional -- it prevents stale-feature-branch \"black hole\" repos that confuse cross-repo reasoning. Supports `--repo NAME` (repeatable) to scope to specific repos. Independent from any other repo mirrors this workstation may have. Use when the local mirror is out of date, before a cross-repo grep / review session, when adding a new netdata-org repo (auto-discovered), when an assistant needs cross-repo cognition without `gh` API turnaround.","mirror-netdata-repos",{"claudeCode":270},"SKILL.md frontmatter at .agents/skills/mirror-netdata-repos/SKILL.md",[384,385],{"path":274,"priority":275},{"path":386,"priority":278},"scripts/sync-netdata-repos.sh",{"basePath":388,"description":389,"displayName":390,"installMethods":391,"rationale":392,"selectedPaths":393,"source":283,"sourceLanguage":17,"type":284},".agents/skills/pr-reviews","Address pull-request comments and reviews iteratively until the PR is clean — fetch all comments with paranoid pagination, classify by author (AI bot vs human), verify each finding, address it, find similar patterns, reply per-thread, resolve threads, check CI before pushing, retrigger AI reviewers (cubic-dev-ai, copilot), and wait for new feedback. Use when the user says \"address PR comments\", \"look at the reviews on PR N\", \"deal with the bot comments\", \"iterate on PR N until clean\", or anything mentioning PR comments / reviews / cubic / copilot.","pr-reviews",{"claudeCode":270},"SKILL.md frontmatter at .agents/skills/pr-reviews/SKILL.md",[394,395,396,398,400,402,404,406,408,410,412],{"path":274,"priority":275},{"path":277,"priority":278},{"path":397,"priority":278},"scripts/ci-status.sh",{"path":399,"priority":278},"scripts/fetch-all.sh",{"path":401,"priority":278},"scripts/fetch-sonar-findings.sh",{"path":403,"priority":278},"scripts/list-open-threads.sh",{"path":405,"priority":278},"scripts/reply-thread.sh",{"path":407,"priority":278},"scripts/resolve-thread.sh",{"path":409,"priority":278},"scripts/trigger-copilot.sh",{"path":411,"priority":278},"scripts/trigger-cubic.sh",{"path":413,"priority":278},"scripts/wait-for-activity.sh",{"basePath":415,"description":416,"displayName":417,"installMethods":418,"rationale":419,"selectedPaths":420,"source":283,"sourceLanguage":17,"type":284},".agents/skills/project-snmp-profiles-authoring","Use when editing Netdata SNMP profile YAMLs, topology SNMP profiles, ddsnmp profile parsing, or profile-format documentation. Requires checking source MIB field accessibility, especially MAX-ACCESS not-accessible INDEX objects, before adding or changing profile symbols.","project-snmp-profiles-authoring",{"claudeCode":270},"SKILL.md frontmatter at .agents/skills/project-snmp-profiles-authoring/SKILL.md",[421],{"path":274,"priority":275},{"basePath":423,"description":424,"displayName":425,"installMethods":426,"rationale":427,"selectedPaths":428,"source":283,"sourceLanguage":17,"type":284},".agents/skills/project-writing-collectors","Best practices and orientation for AI assistants authoring or modifying Netdata data-collection plugins or modules in any language. Read before adding a new collector, modifying an existing one, working on logs, topology, NetFlow/sFlow/IPFIX, OTEL ingestion, SNMP profiles, statsd, Prometheus scraping, or interactive Functions. Covers the mental model, framework-agnostic best practices, dashboard-shaping mechanisms (NIDL, SNMP profiles, statsd synthetic_charts, OTEL mappings, Prometheus exposition), production quality criteria, the plugin landscape, per-data-type patterns (metrics, logs, snapshots, topology, enrichment), per-domain common practices, and a pre-PR self-check.","project-writing-collectors",{"claudeCode":270},"SKILL.md frontmatter at .agents/skills/project-writing-collectors/SKILL.md",[429],{"path":274,"priority":275},{"basePath":431,"description":432,"displayName":433,"installMethods":434,"rationale":435,"selectedPaths":436,"source":283,"sourceLanguage":17,"type":284},".agents/skills/query-agent-events","Bug-investigation tool for the Netdata agent-events ingestion namespace -- triage crashes, panics, fatals across the fleet by downloading events of interest and clustering locally. Covers the three transports (Cloud API and direct agent API are primary; ssh is operator-only), the verified AE_* field map and enum meanings, the dedup model (23h client-side per agent and event signature), the after-the-fact event timing (POST only on agent restart), and the Netdata systemd-journal plugin multi-value filter syntax (FIELD in A, B, C) AND ... Use when investigating crashes / panics / fatals; when grepping for events touching a specific function or file or version; when looking for regressions across versions; when an agent is reported crashing in a way you want to triage. Ships scripts get-events.sh and analyze-events.sh that fetch events with index-friendly filters and compute group-by stats. Defaults to last 24 hours and to the latest stable plus latest 2-3 nightlies.","query-agent-events",{"claudeCode":270},"SKILL.md frontmatter at .agents/skills/query-agent-events/SKILL.md",[437,438,440,442,444,446,447,449,451,453,455],{"path":274,"priority":275},{"path":439,"priority":331},"AE_FIELDS.md",{"path":441,"priority":331},"finding-crashes.md",{"path":443,"priority":331},"finding-fatals.md",{"path":445,"priority":331},"query-discipline.md",{"path":277,"priority":278},{"path":448,"priority":278},"scripts/analyze-events.sh",{"path":450,"priority":278},"scripts/get-events.sh",{"path":452,"priority":278},"scripts/redact-events.sh",{"path":454,"priority":331},"transports.md",{"path":456,"priority":331},"update-cadence.md",{"basePath":458,"description":459,"displayName":460,"installMethods":461,"rationale":462,"selectedPaths":463,"source":283,"sourceLanguage":17,"type":284},".agents/skills/sonarqube-audit","Triage SonarCloud findings (issues, hotspots, code smells, vulnerabilities) for this project — search what's open, mark False Positive / Won't Fix / Confirm / Safe / Acknowledged / Fixed, batch-mark whole rule families. Use when the user asks to \"review Sonar findings\", \"triage SonarCloud\", \"mark False Positive on Sonar\", or anything mentioning sonarqube/sonarcloud, S2259, S5008, code smells, security hotspots, or sonarcloud.io.","sonarqube-audit",{"claudeCode":270},"SKILL.md frontmatter at .agents/skills/sonarqube-audit/SKILL.md",[464,465,466,468],{"path":274,"priority":275},{"path":277,"priority":278},{"path":467,"priority":278},"scripts/sonar-mark.sh",{"path":469,"priority":278},"scripts/sonar-search.sh",{"basePath":471,"description":472,"displayName":473,"installMethods":474,"rationale":475,"selectedPaths":476,"source":283,"sourceLanguage":17,"type":284},"docs/netdata-ai/skills/query-netdata-agents","Query Netdata Agents (parents and children) directly via their HTTP API on port 19999. Includes a bearer-token helper that mints, caches, and transparently refreshes a per-agent bearer from a long-lived Netdata Cloud token, and auto-detects bearer-protected agents. Use when the user asks how to call an agent's REST API or Function directly, query an agent's logs/metrics/alerts directly, mint a bearer token from a cloud token, or work around bearer protection.","query-netdata-agents",{"claudeCode":270},"SKILL.md frontmatter at docs/netdata-ai/skills/query-netdata-agents/SKILL.md",[477,478,480,482,484,486,488,490,492,494,496],{"path":274,"priority":275},{"path":479,"priority":331},"query-alerts.md",{"path":481,"priority":331},"query-dyncfg.md",{"path":483,"priority":331},"query-flows.md",{"path":485,"priority":331},"query-functions.md",{"path":487,"priority":331},"query-logs.md",{"path":489,"priority":331},"query-metrics.md",{"path":491,"priority":331},"query-nodes.md",{"path":493,"priority":331},"query-streaming.md",{"path":495,"priority":331},"query-topology.md",{"path":277,"priority":278},{"basePath":498,"description":499,"displayName":500,"installMethods":501,"rationale":502,"selectedPaths":503,"source":283,"sourceLanguage":17,"type":284},"docs/netdata-ai/skills/query-netdata-cloud","Query Netdata Cloud via its REST API -- metrics, logs (systemd-journal / windows-events / otel-logs), topology graphs (topology:snmp), network flows (flows:netflow), alerts, dynamic configuration (DynCfg), and generic Functions on a node. Use when the user asks about querying Netdata Cloud, fetching metrics from the cloud, querying logs / topology / netflow / sflow / ipfix through Cloud, listing or modifying configurations via DynCfg, calling agent Functions through Cloud, listing spaces/rooms/nodes, or building a curl command against `app.netdata.cloud`. Pairs with the `query-netdata-agents` skill when direct-agent access is needed.","query-netdata-cloud",{"claudeCode":270},"SKILL.md frontmatter at docs/netdata-ai/skills/query-netdata-cloud/SKILL.md",[504,505,506,507,509,510,511,512,514,515,516,518],{"path":274,"priority":275},{"path":479,"priority":331},{"path":481,"priority":331},{"path":508,"priority":331},"query-feed.md",{"path":483,"priority":331},{"path":485,"priority":331},{"path":487,"priority":331},{"path":513,"priority":331},"query-members.md",{"path":489,"priority":331},{"path":491,"priority":331},{"path":517,"priority":331},"query-rooms.md",{"path":495,"priority":331},{"basePath":520,"installMethods":521,"rationale":523,"selectedPaths":524,"source":283,"sourceLanguage":17,"type":250},"src/crates/netdata-log-viewer/otel-signal-viewer-plugin",{"cargo":522},"otel-signal-viewer-plugin","cli ecosystem detected at src/crates/netdata-log-viewer/otel-signal-viewer-plugin",[525,527,529],{"path":526,"priority":275},"Cargo.toml",{"path":528,"priority":275},"README.md",{"path":530,"priority":331},"src/main.rs",{"basePath":532,"installMethods":533,"rationale":535,"selectedPaths":536,"source":283,"sourceLanguage":17,"type":250},"src/crates/netdata-otel/otel-plugin",{"cargo":534},"otel-plugin","cli ecosystem detected at src/crates/netdata-otel/otel-plugin",[537,538,539],{"path":526,"priority":275},{"path":530,"priority":331},{"path":540,"priority":278},"src/lib.rs",{"basePath":248,"installMethods":542,"rationale":543,"selectedPaths":544,"source":283,"sourceLanguage":17,"type":250},{"cargo":12},"cli ecosystem detected at src/crates/netflow-plugin",[545,546,547],{"path":526,"priority":275},{"path":528,"priority":275},{"path":530,"priority":331},{"basePath":549,"installMethods":550,"rationale":552,"selectedPaths":553,"source":283,"sourceLanguage":17,"type":250},"src/crates/netipc",{"cargo":551},"netipc","cli ecosystem detected at src/crates/netipc",[554,555],{"path":526,"priority":275},{"path":540,"priority":278},{"basePath":557,"installMethods":558,"rationale":560,"selectedPaths":561,"source":283,"sourceLanguage":17,"type":250},"src/crates/rdp",{"cargo":559},"rdp","cli ecosystem detected at src/crates/rdp",[562,563,564],{"path":526,"priority":275},{"path":530,"priority":331},{"path":540,"priority":278},{"basePath":566,"installMethods":567,"rationale":569,"selectedPaths":570,"source":283,"sourceLanguage":17,"type":250},"src/go",{"go":568},"github.com/netdata/netdata/go/plugins","cli ecosystem detected at src/go",[571,573,575,577,579],{"path":572,"priority":275},"go.mod",{"path":574,"priority":331},"cmd/godplugin/main.go",{"path":576,"priority":331},"cmd/ibmdplugin/main.go",{"path":578,"priority":331},"cmd/scriptsdplugin/main.go",{"path":580,"priority":278},"cmd/ibmdplugin/stub.go",{"basePath":582,"installMethods":583,"rationale":585,"selectedPaths":586,"source":283,"sourceLanguage":17,"type":593},"",{"remote":584},"https://app.netdata.cloud/api/v1/mcp","server.json with namespace/server name at server.json",[587,589,590],{"path":588,"priority":275},"server.json",{"path":528,"priority":275},{"path":591,"priority":592},"LICENSE","high","mcp",{"sources":595},[596],"manual",{"closedIssues90d":237,"description":10,"forks":238,"homepage":598,"license":243,"openIssues90d":237,"pushedAt":240,"readmeSize":235,"stars":241,"topics":599},"https://www.netdata.cloud",[600,601,602,603,604,249,605,219,606,607,608,609,610,611,612,613,614,615,593,616],"monitoring","docker","kubernetes","cncf","prometheus","devops","alerting","influxdb","grafana","data-visualization","database","linux","machine-learning","mysql","postgresql","mongodb","ai",{"classifiedAt":618,"discoverAt":619,"extractAt":620,"githubAt":620,"updatedAt":618},1778694578050,1778694565561,1778694575885,[217,216,220,219,221,218],{"evaluatedAt":246,"extractAt":623,"updatedAt":246},1778694578248,[],[626],{"_creationTime":627,"_id":628,"community":629,"display":630,"identity":633,"providers":634,"relations":643,"tags":644,"workflow":645},1778694578248.1074,"k1761s0cbnce7qwccb3zrxct5186mkxt",{"reviewCount":8},{"description":10,"installMethods":631,"name":632,"sourceUrl":13},{"cargo":559},"Netdata Field Encoder CLI",{"basePath":557,"githubOwner":249,"githubRepo":249,"locale":17,"slug":559,"type":250},{"evaluate":635,"extract":641},{"promptVersionExtension":209,"promptVersionScoring":210,"score":636,"tags":637,"targetMarket":222,"tier":223},99,[219,638,639,250,640],"data-processing","encoding","developer-tool",{"commitSha":256,"license":642},"GPL-3.0-or-later",{"repoId":258},[250,638,640,639,219],{"evaluatedAt":646,"extractAt":623,"updatedAt":646},1778694927532]