sls-dashboard-builder

sls-dashboard-builder is a skill for Claude Code, Codex from alibaba/loongsuite-pilot. It costs 72 tokens per session (3,406 once invoked), scanned A, original, Apache-2.0.

A tool for creating and modifying importable JSON dashboards for Alibaba Cloud SLS, a service for searching and monitoring logs. It maps checked queries and analysis needs to dashboard charts.

In plain words
What is it for?
Use it to create, extend, rearrange, or prepare SLS dashboards for import. It supports operational views with Chinese labels and metric definitions, but it is not for general frontend visualization or explaining queries alone.
Why use it?
It turns monitoring requirements or existing dashboard data into a structured dashboard configuration. When an online dashboard is involved, it preserves the current version and limits changes to the requested patch.

Skill for Claude CodeCodex ✓ vendor

Written for no agent in particular: nothing here depends on one. Also seen: installed under .agents/ (shared by several agents).

Needs its repository: it runs a file that does not travel with it, so clone the repository first. The line is python3 .agents/skills/sls-dashboard-builder/scripts/render_report.py \.

Good fit Use it to create, extend, rearrange, or prepare SLS dashboards for import. It supports operational views with Chinese labels and metric definitions, but it is not for general frontend visualization or explaining queries alone.

Compare 6 skills from other repositories ↓
About the project

LoongSuite Pilot is a local telemetry collector that gathers activity from AI coding agents, converts their different records into a shared event format, and exports the data to selected destinations. Development teams use it to inspect agent usage, token consumption, sessions, tools, traces, and security-sensitive data. Its catalogue add-ons support working with and configuring the collector for coding-agent telemetry.

alibaba/loongsuite-pilot · 179 stars · on GitHub

Install

Getting it into your agent

It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.

Clone the repo
git clone --depth 1 https://github.com/alibaba/loongsuite-pilot
agentmods
npx agentmods add skills/alibaba/loongsuite-pilot/sls-dashboard-builder

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for sls-dashboard-builder

README.md
[![agentmods](https://agentmods.dev/badge/skills/alibaba/loongsuite-pilot/sls-dashboard-builder/github.svg)](https://agentmods.dev/skills/alibaba/loongsuite-pilot/sls-dashboard-builder)
Your own site
<a href="https://agentmods.dev/skills/alibaba/loongsuite-pilot/sls-dashboard-builder"><img src="https://agentmods.dev/badge/skills/alibaba/loongsuite-pilot/sls-dashboard-builder/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for sls-dashboard-builder

Your own site · 80×15
<a href="https://agentmods.dev/skills/alibaba/loongsuite-pilot/sls-dashboard-builder"><img src="https://agentmods.dev/badge/skills/alibaba/loongsuite-pilot/sls-dashboard-builder.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 72 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 3,406 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 2 findings, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • medium Rogue Agent · line 105
    Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
    Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
  • medium Rogue Agent · line 142
    Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
    Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00072 $0.03406
Opus 5 $0.00036 $0.01703
Sonnet 5 $0.00014 $0.00681
Haiku 4.5 $0.00007 $0.00341

Measured 13d ago against content hash cb01a74bb8cd, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-12, from the pricing page.

Security

Grade A, and why

sls-dashboard-builder scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 13d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

solutions/loongsuite-pilot-sls-dashboard/.agents/skills/sls-dashboard-builder/SKILL.md · 218 lines

How it starts

The opening of the file, as written. The whole thing — 218 lines — stays where its author put it; the contents beside it link to each section on GitHub.

SLS Dashboard Builder

创建或修改完整、可导入的阿里云 SLS dashboard JSON。

必备运维技能: 若任务涉及真实 Project 或大盘,且需要通过 aliyun sls ... 查看或复用线上大盘,必须基于最新线上 JSON 操作。

总览

本技能以任务为先,不以「先选图表模板」为先。
线上大盘,还以当前线上状态为先。

若用户已提供以下任意一项或多项,不要从随意图表模板起手:

  • 已有 dashboard JSON
  • 大盘 URL 或大盘名称
  • 指标需求或查询方案
  • 已校验的查询结果文件
  • 明确的「做这 2 张大盘」之类需求说明

上述情况下应先还原任务结构,再把每个已校验的视图映射到 SLS 图表,最后拼出 dashboard JSON。
若大盘已在线存在,应在最新线上 JSON 上打补丁,而不是推送更早的本地草稿。

何时使用

适用于:

  • 新建 dashboard JSON
  • 修改、扩展、重排已有 dashboard
  • 将一份分析 / 监控需求包落实为 1 张或多张 dashboard
  • 生成可直接通过 SLS API 导入的 dashboard 配置
  • 参考现有 dashboard 的成熟写法做最小改造

不适用于:

  • 单纯解释 SQL / PromQL
  • 复杂前端可视化开发
  • 非 SLS dashboard 配置

默认行为

  • 默认输出形态:api-ready
  • 新建大盘:现代格式(modern)
  • 已有老格式大盘:保持 legacy,仅做最小补丁
  • 用户提供了现有 JSON:保留未知字段与未改动的图表
  • 未明确要求发布,或用户尚未确认预览效果前,只生成或修改本地 dashboard JSON,不 create/update 线上大盘
  • create/update 线上大盘时,以用户确认后的 dashboard JSON 为准
  • 发布到 SLS 时使用插件命令 aliyun sls update-dashboard / create-dashboard,显式传 --display-name--charts--description--attribute remark=<具体修改原因> type=grid update=<ms> version=<version>;不要用 CamelCase OpenAPI 入口 UpdateDashboard --body-file 发布。
  • 公开 SLS Dashboard API 的 UpdateDashboard / aliyun sls update-dashboard 是覆盖式更新当前大盘;attribute.version/update/remark 只影响当前版本展示元数据,不会自动追加控制台「历史版本」归档。
  • 用户说「先给一版」:默认 single-dashboard-mvp
  • 用户提供完整任务包或设计文档:默认 single-dashboard-full
  • 用户明确要求多张大盘:使用 multi-dashboard-suite

模式

1. 更新已有大盘

  1. 先拉取或读取当前 JSON
  2. 复用现有结构,只改被要求的图表或布局
  3. 不相关的图表与字段保持不动

2. 创建单张大盘

适用于用户需要一张盘,包含概览、关键趋势与表格等。

3. 创建大盘套件(多张)

适用于用户需要多个决策面,例如 留存与活跃 + 业务与成本

多张盘之间保持命名、筛选器、标题风格与版式节奏一致。

任务包工作流

当输入包含需求文档、查询方案、结果文件或参考大盘时,按以下顺序:

  1. 判定任务形态:更新、新建,还是套件
  2. 建立视图清单:指标、展示意图、project 或 logstore、时间范围、阻塞项
  3. 若有名称或 URL,优先拉取真实参考大盘
  4. 将视图归组为大盘区块,例如 概览趋势TOPCohort钻取
  5. 视图意图选图表配方,不按产品营销名称选
  6. 仅当图表查询确实可被过滤或可被 token 替换时才加筛选器
  7. 受阻指标写成简短 markdownpro 说明,或明确省略;绝不编造缺失的源数据
  8. 每张大盘输出完整 JSON

针对此类分析套件任务,请阅读:

  • references/task-driven-workflow.md
  • references/view-recipes.md

Read the full file on GitHub · 218 lines

Files

What ships with it

60 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 13d ago First seen · 218 lines · 72 tokens per session scan A cb01a74bb8cd

Subscribe to this mod's changes

sls-dashboard-builder is a skill published in the GitHub repository alibaba/loongsuite-pilot (179 stars, last pushed yesterday), licensed Apache-2.0. It adds 72 tokens to every session and 3,406 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

workflow-authoring

Reference for writing a Workflow tool script (script API and gotchas, agent() options, pipeline() vs parallel(), verification and convergence patterns, resume, worked example). Load before authoring a script for a workflow the user already opted into; it does not itself authorize running one.

QwenLM/qwen-code · 60 tokens

stuck

Diagnose frozen, stuck, or slow Qwen Code sessions on this machine. Scans for problematic processes, high CPU/memory usage, hung subprocesses, and debug logs. Use /stuck or /stuck to focus on a specific process.

QwenLM/qwen-code · 57 tokens

e2e-testing

Guide for running end-to-end tests of the Qwen Code CLI, including headless mode, MCP server testing, and API traffic inspection. Use this skill whenever you need to verify CLI behavior with real model calls, reproduce user-reported bugs end-to-end, test MCP tool integrations, or inspect raw API request/response…

QwenLM/qwen-code · 94 tokens

structured-debugging

Hypothesis-driven debugging methodology for hard bugs. Use this skill whenever you're investigating non-trivial bugs, unexpected behavior, flaky tests, or tracing issues through complex systems. Activate proactively when debugging requires more than a quick glance — especially when the first attempt at a fix didn't…

QwenLM/qwen-code · 85 tokens

terminal-capture

Automates terminal UI screenshot testing for CLI commands. Applies when reviewing PRs that affect CLI output, testing slash commands (/about, /context, /auth, /export), generating visual documentation, or when 'terminal screenshot', 'CLI test', 'visual test', or 'terminal-capture' is mentioned.

QwenLM/qwen-code · 66 tokens

batch

Execute batch operations on multiple files in parallel. Automatically discovers files, splits into chunks, and processes with parallel worker agents. Use /batch followed by operation and file pattern.

QwenLM/qwen-code · 37 tokens