vmanomaly-preset

vmanomaly-preset is a skill for Claude Code from VictoriaMetrics/skills. It costs 68 tokens per session (1,402 once invoked), scanned A, original, Apache-2.0.

A workflow for discovering time-series signals in VictoriaMetrics and assembling an anomaly-detection bundle. The bundle can include configuration, alert rules, dashboards, and a chosen deployment form.

In plain words
What is it for?
Use it to inspect service metrics, choose suitable signals, and produce a reproducible vmanomaly preset. It supports monitoring setup for alerts and dashboards without deploying them automatically.
Why use it?
It helps when a team wants anomaly detection but does not yet know which queries or settings to use. It bases the preset on authorized data and keeps deployment and remote changes outside the workflow.

Skill for Claude Code

Written for Claude Code: allowed-tools in frontmatter.

Part of the vmanomaly plugin — 5 skills shipped together

Good fit Use it to inspect service metrics, choose suitable signals, and produce a reproducible vmanomaly preset. It supports monitoring setup for alerts and dashboards without deploying them automatically.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/victoriametrics/skills/vmanomaly-preset
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add VictoriaMetrics/skills --skill vmanomaly-preset
Clone the repo
git clone --depth 1 https://github.com/VictoriaMetrics/skills

Made for: Claude Code.

Or install vmanomaly, the plugin that ships this one along with the rest of its 5 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for vmanomaly-preset

README.md
[![agentmods](https://agentmods.dev/badge/skills/victoriametrics/skills/vmanomaly-preset/github.svg)](https://agentmods.dev/skills/victoriametrics/skills/vmanomaly-preset)
Your own site
<a href="https://agentmods.dev/skills/victoriametrics/skills/vmanomaly-preset"><img src="https://agentmods.dev/badge/skills/victoriametrics/skills/vmanomaly-preset/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for vmanomaly-preset

Your own site · 80×15
<a href="https://agentmods.dev/skills/victoriametrics/skills/vmanomaly-preset"><img src="https://agentmods.dev/badge/skills/victoriametrics/skills/vmanomaly-preset.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 68 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,402 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00068 $0.01402
Opus 5.5 $0.00027 $0.00561
Sonnet 5.5 $0.00014 $0.00280
Haiku 4.5 $0.00007 $0.00140

Measured 2d ago against content hash 0a2be5d9ff9d, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

vmanomaly-preset scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

The scan reads SKILL.md. This mod also ships 1 executable file (scripts/render_bundle.py), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

allowed-tools: Bash(curl:*), Bash(jq:*), Bash(python3:*), Read
plugins/vmanomaly/skills/vmanomaly-preset/SKILL.md · 41 lines

How it starts

The opening of the file, as written. The whole thing — 41 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Dynamic anomaly presets

Deliver a small, reproducible monitoring bundle. Start with the customer's authorized datasource/tenant, service scope, detection intent and deployment preference. Infer metric properties from data; ask only for business constraints or destinations that cannot be inferred. This workflow does not authorize deployment, remote dashboard updates or alert delivery.

For MCP/Copilot delivery, follow the versioned preset completion guide, the canonical source of the compact guide distributed by MCP. It defines the bounded autotune and holdout quality check, file-generation completion, missing-destination handling and workspace-preview boundaries.

Discover and choose

  1. Check runtime tools and schemas. vmanomaly 1.31.0 sizing and MCP 0.5.0 are established capabilities; discovery and artifact generation require the newer endpoints described in the API contract. On 404, verify the server version and configured base URL, including any path prefix; only a confirmed missing endpoint means unsupported capability. Never interpret it as an empty inventory. If unavailable, use an already-configured VictoriaMetrics query tool within the same scope or deliver a clearly limited manual plan.
  2. Set discovery budgets before calls: ordinarily at most 10 metadata requests, 100 items per call and one day of metadata, then profile at most five candidate queries. Broaden only with evidence and a stated cost. Track cumulative calls, returned items and incomplete responses; stop when the budget is reached. These are workflow defaults, not claims about TSDB scan cost.
  3. Discover metric names through __name__ values, then relevant label names/values. Metric prefixes are clues, not proof of semantics. Do not enumerate tenants. Read recipes for the selected domain; check every referenced metric and label before constructing a query.
  4. Rank by user relevance, coverage, actionable interpretation, cost and existing alerts. Classify static, temporal, joint, peer or context-only. Keep counters as rates, normalize units, and avoid unsupported histogram assumptions. Missing metadata is unknown. Sample across entity groups rather than selecting only the first series.
  5. For chosen exact queries, follow the available vmanomaly-config workflow or perform its equivalent: characteristics, live model schema, causal candidate evaluation and full-config validation at the same step/timezone. Prefer online models; preserve complete multivariate groups and comparable peer pools. Default inference to minute-scale cadence, ordinarily 5m, unless intent requires otherwise. Choose query step separately to retain relevant events and preserve existing query resolution. Choose explicit refit cadence as described in the completion guide; periodic fit_every otherwise inherits inference cadence.
  6. Use existing deployment sizing for the actual topology and cardinality evidence. Sample counts are lower bounds, not exact fleet size. Keep unsupported configurations unsupported; do not substitute fewer peers, shorter history or a slower cadence to obtain a feasible estimate.

Read the full file on GitHub · 41 lines

Files

What ships with it

6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 41 lines · 68 tokens per session scan A 0a2be5d9ff9d

Subscribe to this mod's changes

vmanomaly-preset is a skill published in the GitHub repository VictoriaMetrics/skills (62 stars, last pushed 2d ago), licensed Apache-2.0. It adds 68 tokens to every session and 1,402 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-11-05.

Related

vmanomaly-preset compared with skills from other repositories

vmanomaly-preset next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
vmanomaly-presetVictoriaMetrics/skillsSkill622d agoApache-2.0A68Claude Code
gke-compute-classesgoogle/skillsSkill22kyesterdayApache-2.0A83Claude Code, Codex
gke-reliabilitygoogle/skillsSkill22kyesterdayApache-2.0A85Claude Code, Codex
gke-workload-securitygoogle/skillsSkill22kyesterdayApache-2.0A171Claude Code, Codex
cloud-architectJeffallan/claude-skillsSkill12k7d agoMITA71Claude Code
nemo-automodel-launcher-configNVIDIA/skillsSkill3.9kyesterdayApache-2.0A30Claude Code
azure-mgmt-botservice-dotnetmicrosoft/skillsSkill3.2kyesterdayMITA78Claude Code