Data & Analytics Agent Skills
Data agent skills make AI agents useful for data work: writing SQL, cleaning datasets, building pipelines, working with spreadsheets, and producing analyses. Each skill is a reviewed SKILL.md file that teaches the agent one workflow well, ready to install in seconds.
Data & Analytics
1,725 skills
k-dense-ai dnanexus-integration
Build and deploy apps/applets on the DNAnexus cloud genomics platform, manage data objects, run workflows, and use the dxpy Python SDK for genomics pipeline development and execution.
30.2k · bundle
k-dense-ai imaging-data-commons
Query and download public cancer imaging data from NCI Imaging Data Commons using idc-index. Access large-scale radiology (CT, MR, PET) and pathology datasets for AI training or research. No authentication required. Query by metadata, visualize in browser, check licenses.
30.2k · bundle
k-dense-ai latchbio-integration
Build and deploy bioinformatics workflows as serverless pipelines on the Latch platform using Python decorators, cloud data management, and GPU support.
30.2k · bundle
k-dense-ai neuropixels-analysis
Analyze Neuropixels extracellular recordings end-to-end with SpikeInterface, covering loading, preprocessing, drift correction, spike sorting, quality metrics, and unit curation.
30.2k · bundle
k-dense-ai statistical-analysis
Guides statistical hypothesis testing with assumption checks, effect sizes, power analysis, Bayesian alternatives, and APA-formatted reporting for research data.
30.2k · bundle
k-dense-ai benchling-integration
Integrate with Benchling's Python SDK and REST API to manage registry entities, inventory, ELN entries, workflows, and Data Warehouse queries for life sciences R&D automation.
30.2k · bundle
k-dense-ai opentrons-integration
Write Opentrons Protocol API v2 protocols for Flex and OT-2 robots to automate liquid handling, control hardware modules, and manage labware configurations.
30.2k · bundle
k-dense-ai labarchive-integration
Access and manage LabArchives electronic lab notebooks programmatically via REST API. Create entries, upload attachments, backup notebooks, generate reports, and integrate with Protocols.io, Jupyter, REDCap, and other scientific tools.
30.2k · bundle
k-dense-ai get-available-resources
Detects available CPU, GPU, memory, and disk resources and generates strategic recommendations for scientific computing tasks.
30.2k · bundle
k-dense-ai market-research-reports
Generate comprehensive, professional-grade market research reports (50+ pages) with LaTeX formatting, strategic frameworks, and data-driven visualizations.
30.2k · bundle
k-dense-ai scientific-visualization
Create publication-ready scientific figures with multi-panel layouts, significance annotations, error bars, colorblind-safe palettes, and journal-specific formatting using matplotlib, seaborn, and plotly.
30.2k · bundle
k-dense-ai clinical-decision-support
Generate professional clinical decision support documents for pharmaceutical and clinical research, including biomarker-stratified cohort analyses and evidence-based treatment recommendation reports with GRADE grading, statistical analysis, and publication-ready LaTeX/PDF output.
30.2k · bundle
k-dense-ai exploratory-data-analysis
Automatically detect and analyze scientific data files across 200+ formats, generating detailed markdown reports with quality metrics and analysis recommendations.
30.2k · bundle
mukul975 processing-stix-taxii-feeds
Processes STIX 2.1 threat intelligence bundles from TAXII 2.1 servers, normalizing objects into platform-native schemas and routing them to consuming systems.
24.6k · bundle
mukul975 modeling-threats-with-opencti
Model threat actors, intrusion sets, campaigns, and TTPs as a STIX 2.1 knowledge graph in OpenCTI using the pycti Python client, connectors, and import workers for structured cyber threat intelligence.
24.6k · bundle
mukul975 analyzing-linux-kernel-rootkits
Detect kernel-level rootkits in Linux memory dumps using Volatility3 plugins and live system scanners to identify hooked syscalls, hidden modules, and tampered structures.
24.6k · bundle
mukul975 detecting-shadow-it-cloud-usage
Analyze proxy logs, DNS query logs, and netflow data to detect unauthorized SaaS and cloud service usage, classify domains, and flag high-risk services.
24.6k · bundle
mukul975 analyzing-linux-system-artifacts
Examine Linux system artifacts including auth logs, cron jobs, shell history, and system configuration to uncover evidence of compromise or unauthorized activity.
24.6k · bundle
mukul975 analyzing-disk-image-with-autopsy
Perform comprehensive forensic analysis of disk images using Autopsy to recover files, examine artifacts, and build investigation timelines.
24.6k · bundle
mukul975 detecting-dnp3-protocol-anomalies
Detect anomalies in DNP3 protocol communications used in SCADA systems by monitoring for unauthorized control commands, firmware update attempts, protocol violations, and deviations from baseline traffic patterns using deep packet inspection and machine learning approaches.
24.6k · bundle
mukul975 detecting-mobile-malware-behavior
Analyzes mobile applications for malicious behavior through static analysis, runtime monitoring, and network traffic inspection to identify malware indicators.
24.6k · bundle
mukul975 detecting-pass-the-ticket-attacks
Detect Kerberos Pass-the-Ticket attacks by analyzing Windows Event IDs 4768, 4769, and 4771 for anomalous ticket usage patterns in Splunk and Elastic SIEM.
24.6k · bundle
mukul975 hunting-for-cobalt-strike-beacons
Detect Cobalt Strike beacon network activity using TLS certificate signatures, JA3/JA3S/JARM fingerprints, HTTP C2 profile matching, beacon jitter analysis, and named pipe detection via Zeek, Suricata, and Python PCAP analysis.
24.6k · bundle
mukul975 implementing-siem-use-case-tuning
Reduce SIEM alert fatigue by systematically tuning detection rules in Splunk and Elastic, using statistical baselines, whitelists, and precision/recall metrics.
24.6k · bundle
mukul975 detecting-attacks-on-scada-systems
Detects cyber attacks targeting SCADA systems, including man-in-the-middle, command injection, HMI compromise, historian manipulation, and DoS, using OT-specific intrusion detection and protocol anomaly analysis.
24.6k · bundle
mukul975 detecting-insider-threat-with-ueba
Detect insider threats by modeling normal user and entity behavior with Elasticsearch, computing anomaly scores, and correlating low-confidence indicators into high-confidence alerts.
24.6k · bundle
mukul975 performing-dns-tunneling-detection
Detects DNS tunneling by computing Shannon entropy of DNS query names, analyzing query length distributions, inspecting TXT record payloads, and identifying high subdomain cardinality using scapy for packet capture analysis.
24.6k · bundle
mukul975 performing-steganography-detection
Detect and extract hidden data embedded in images, audio, and other media files using steganalysis tools to uncover covert communication channels.
24.6k · bundle
mukul975 performing-user-behavior-analytics
Detect anomalous user activities including impossible travel, unusual access patterns, privilege abuse, and insider threats using SIEM-based behavioral baselines and statistical analysis.
24.6k · bundle
mukul975 analyzing-threat-intelligence-feeds
Ingests, normalizes, and enriches structured and unstructured threat intelligence feeds into STIX 2.1 format, evaluating feed quality and deduplicating indicators for distribution to SIEM, firewall, and EDR platforms.
24.6k · bundle
mukul975 building-super-timelines-with-plaso
Build forensic super timelines from disk images using Plaso (log2timeline) and triage them in Timesketch.
24.6k · bundle
mukul975 detecting-modbus-protocol-anomalies
Detects anomalies in Modbus/TCP and Modbus RTU communications in industrial control systems using Zeek, Suricata, and custom Python analysis.
24.6k · bundle
mukul975 hunting-credential-stuffing-attacks
Detects credential stuffing attacks by analyzing authentication logs for login velocity anomalies, ASN diversity, password spray patterns, and geographic distribution of failed logins using statistical analysis on Splunk or raw log data.
24.6k · bundle
mukul975 hunting-for-dns-tunneling-with-zeek
Detect DNS tunneling and data exfiltration by analyzing Zeek dns.log for high-entropy subdomain queries, excessive query volume, long query lengths, and unusual DNS record types indicating covert channel communication.
24.6k · bundle
mukul975 implementing-diamond-model-analysis
Provides a structured framework for analyzing cyber intrusions by examining four core features: Adversary, Capability, Infrastructure, and Victim. Covers implementing the Diamond Model programmatically to classify and correlate intrusion events, build activity threads, and generate pivot-ready intelligence.
24.6k · bundle
mukul975 performing-malware-triage-with-yara
Rapidly classify malware samples against known family signatures using YARA rules, covering rule writing, scanning, and integration with analysis pipelines.
24.6k · bundle
Frequently asked questions
What are Data & Analytics agent skills?
Data agent skills make AI agents useful for data work: writing SQL, cleaning datasets, building pipelines, working with spreadsheets, and producing analyses. Each skill is a reviewed SKILL.md file that teaches the agent one workflow well, ready to install in seconds.
Which Data & Analytics skills are most installed?
Popular Data & Analytics skills on SkillMD right now include scientific-visualization, analyzing-linux-kernel-rootkits, statistical-analysis. Rankings shift as installs change; sort this page by "Most downloaded" for the live list.
Do Data & Analytics skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds add <owner>/<name>, or copy the file into your agent's skills directory.