360 Secure SkillHub
360 安全技能中心

Dashboard

该 Skill 在 ~/dashboard/ 下生成静态 HTML 仪表盘,并按用户指定的数据源生成抓取脚本(凭证走环境变量),由用户自行用 cron 或手动运行来更新 data.json;交付前在浏览器中截图做视觉 QA(无重叠、字号≥14px、对比度良好)。凭据不写入文件,仪表盘默认仅监听 127.0.0.1。

ivangdavila
ivangdavila
热度 95.67
最近更新 2026-05-17 11:57:47
分类:数据依赖:读写文件 / 代码执行 / 联网浏览搜索 / 第三方 API应用场景:报告撰写 / 数据处理 / API 集成 / 自动化脚本 ...

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add dashboard
Metadata
name
Dashboard
slug
dashboard
version
1.0.1
description
Build custom dashboards from any data source with local hosting and visual QA loops.
changelog
User-driven data source model, explicit credential handling
metadata
{"clawdbot":{"emoji":"📊","requires":{"bins":[]},"os":["linux","darwin","win32"]}}

Data Storage

~/dashboard/
├── registry.json           # Dashboard index
├── {name}/
│   ├── config.json         # Layout, widgets
│   ├── data.json           # Current data
│   └── index.html          # Dashboard page

Create on first use: mkdir -p ~/dashboard

Scope

This skill:

  • ✅ Generates static HTML dashboards
  • ✅ Creates fetch scripts user can run
  • ✅ Stores dashboards in ~/dashboard/

User-driven model:

  • User specifies data sources
  • User provides API credentials via environment
  • User runs fetch scripts (cron or manual)
  • Skill generates HTML and fetch scripts

This skill does NOT:

  • ❌ Access credentials without user providing them
  • ❌ Run automated fetches (user's cron runs scripts)
  • ❌ Scrape services without user consent

Quick Reference

Topic File
Data source patterns sources.md
Visual design rules design.md
Widget templates widgets.md

Core Rules

1. User Provides Data

When creating a dashboard:

User: "Dashboard for my Stripe revenue"
Agent: "I'll create a fetch script. Set STRIPE_API_KEY 
        in your environment, then run the script."
→ Generates: ~/dashboard/stripe/fetch.sh
→ User adds to cron: */15 * * * * ~/dashboard/stripe/fetch.sh

2. Architecture

[User's Cron] → [fetch.sh] → [data.json] → [index.html]
                    ↓
              Uses $API_KEY from env

Agent generates scripts. User runs them.

3. Fetch Script Template

#!/bin/bash
# Requires: STRIPE_API_KEY in environment
curl -s -u "$STRIPE_API_KEY:" \
  https://api.stripe.com/v1/balance \
  | jq '.' > ~/dashboard/stripe/data.json

4. Visual QA (Before Delivery)

  • Open in browser, take screenshot
  • Check: no overlap, readable fonts (≥14px), good contrast
  • If issues → fix → repeat
  • Only deliver after visual validation

5. Design Defaults

Element Value
Background #0f172a (dark) / #f8fafc (light)
Text #e2e8f0 (dark) / #1e293b (light)
Spacing 16px, 24px, 32px
Corners 8px
KPI 48-72px number, 14px label

6. Security

  • Credentials via env vars, never in files
  • Dashboards on 127.0.0.1 by default
  • No PII in displayed data
  • User adds auth if exposing to network