Nightingale is an open-source monitoring and alerting system that connects to stored metrics and log data, evaluates alert rules, and distributes notifications. Operations teams use it to manage alarms and explore observability data alongside existing data sources and collectors. Catalogue add-ons provide skills for operating Nightingale.
Getting it into your agent
There is no command for this one: it runs only inside a plugin, and the catalogue could not identify which plugin ships it. The source is linked below.
Wrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ccfos/nightingale/categraf-deploy-guide)<a href="https://agentmods.dev/skills/ccfos/nightingale/categraf-deploy-guide"><img src="https://agentmods.dev/badge/skills/ccfos/nightingale/categraf-deploy-guide.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00132 | $0.02908 |
| Opus 5 | $0.00066 | $0.01454 |
| Sonnet 5 | $0.00026 | $0.00582 |
| Haiku 4.5 | $0.00013 | $0.00291 |
Grade D, and why
categraf-deploy-guide scanned grade D with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
curl -sSfL 'http://N9E_HOST:17000/api/n9e/agents/categraf/install.sh' | sudo bash -s -- --server 'http://N9E_HOST:17000' Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
curl -sSfL 'http://N9E_HOST:17000/api/n9e/agents/categraf/install.sh' | sudo bash -s -- --server 'http://N9E_HOST:17000' Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -sSfL 'http://N9E_HOST:17000/api/n9e/agents/categraf/install.sh' | sudo bash -s -- --server 'http://N9E_HOST:17000' How it starts
The opening of the file, as written. The whole thing — 251 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Categraf Deployment Guide
Scope
Enter this skill:
- "how to install / how to deploy / how to start categraf"
- "run categraf on Docker / Kubernetes / Windows / Linux"
- "how to register categraf as a systemd service / start on boot"
- "report categraf to Nightingale / how to write config.toml / what to put in the writer URL"
- "how to verify that categraf is collecting data"
- "categraf is installed but Nightingale can't see the machine" → do not enter this skill, route to
host-onboard-diagnose
Do not enter this skill:
- Diagnosing onboarding failures after install →
host-onboard-diagnose - Abnormal metrics after onboarding →
host-health-diagnose - Configuring collection for a specific input plugin (mysql / redis / nginx / snmp, etc.) → guide the user to read the comments under
conf/input.<name>/; this skill only covers "get it installed + get it connected"
One-Sentence Principle
categraf deployment = three actions: get the binary → correctly write the [[writers]] section of config.toml → start it and verify. Everything else is a variant of these three steps (containerization, systemd management, Windows service, etc.).
Deployment Methods Quick Reference
| Scenario | Recommended method | Notes |
|---|---|---|
| Linux physical machine / VM | binary + systemd | v0.3.35+ has a built-in --install one-liner to register |
| Linux but no root | binary + --user --install |
supported in v0.4.5+ |
| Container / orchestration environment | Docker or K8s DaemonSet | collecting host metrics requires mounting /proc /sys |
| Windows | categraf.exe --win-service-install |
or run in the background with win_run.bat |
| macOS (development/debugging) | run the binary directly | not recommended for production |
Operating system support: Linux kernel 2.6.32+ / Windows 10+ or Server 2008+ / macOS 10.15+.
Quickest Path: One-Click Install
If the nightingale server is v9+ and bundles categraf, a single command on the target host does everything below (download, unpack, rewrite the reporting address, register and start the systemd service):
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 251 lines · 132 tokens per session scan D 8068cc1c524b
categraf-deploy-guide is a skill published in the GitHub repository ccfos/nightingale (13,280 stars, last pushed yesterday), licensed Apache-2.0. It adds 132 tokens to every session and 2,908 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it D with 3 findings (asks for root, downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
cis-aws-database-10.8
Ensure Monitoring and Alerting is Enabled.
cis-aws-compute-3.7
Ensure logging is configured for Amazon ECS task definitions.
cis-aws-compute-3.9
Ensure monitoring is enabled for Amazon ECS clusters.
k8s-monitoring-alerting
Kubernetes Prometheus/Grafana 异常、告警不触发的完整诊断-修复-验证 Skill.
Observability with Prometheus & Grafana
Production-grade observability stack with Prometheus metrics, Grafana dashboards, PromQL query language, alerting rules, and AI-powered anomaly detection for modern cloud-native applications.
wp-alerting
This skill should be used when the user asks about "alerting", "alerts", "Slack notifications", "email alerts", "monitoring alerts", "threshold alerts", "health reports", "escalation", "incident notifications", "uptime alerts", "error alerts", "performance alerts", "scheduled reports", or mentions setting up…