Data & Analytics
Data agent skills make AI agents useful for data work: writing SQL, cleaning datasets, building pipelines, working with spreadsheets, and producing analyses. Each skill is a reviewed SKILL.md file that teaches the agent one workflow well, ready to install in seconds.
-
mattakushi432 Skill Analytics SetupWhen to activate: analytics setup, GA4, Google Analytics, event tracking, conversion tracking, UTM strategy, attribution, dashboards, data layer, tag management
-
mattakushi432 Skill Golang DatabaseWhen to activate: database/sql, pgx, PostgreSQL in Go, connection pools, prepared statements, migrations with goose
-
mattakushi432 Skill Golang SecurityWhen to activate: Go security, JWT, bcrypt, CORS, input validation, SQL injection prevention, secrets management, rate limiting in Go
-
mattakushi432 Skill Pandas PatternsWhen to activate: pandas, DataFrame operations, data wrangling, CSV/Excel, groupby, merge, performance optimization
-
mattakushi432 Skill Python SecurityWhen to activate: Python security review, OWASP, SQL injection, secrets management, authentication, cryptography
-
mattakushi432 Skill Product AnalyticsWhen to activate: product analytics, funnel analysis, cohort analysis, retention curves, DAU WAU MAU, activation metrics, event tracking, Mixpanel, Amplitude
-
mattakushi432 Skill Clickhouse PatternsWhen to activate: ClickHouse, columnar, analytics, OLAP, MergeTree, materialized view, dictionaries, CHProxy
-
poly-gents Bundle Query DataWrite and execute SQL queries against data warehouses
-
poly-gents Bundle Feature FlaggingDesigns safe feature rollouts with flags, cohort targeting, kill switches, and cleanup plans. Use when launching, gating, or retiring feature flags.
-
h3y6e Skill Agent Platform RAG Engine ManagementManage and query Agent Platform RAG Engine Corpora and retrieve grounded contexts using the Google GenAI SDK. Use when listing RAG corpora or files, inspecting a corpus, retrieving contexts, or generating content grounded in a RAG corpus. Do not use for standard database queries (use SQL/Spanner skills), Google Workspace RAG, or other RAG products like gRAG.
-
ngocsangyem Bundle Mk Scale RoutingDomain-aware complexity routing. Scans task description for domain keywords, matches against domain-complexity.csv, returns complexity level, workflow intensity, and execution tier. Extends Phase 0 orchestration.
-
poly-gents Bundle OktaManages Okta users, groups, and application assignments via connected directory integration. Use when looking up identity records, group membership, or app access—not generic spreadsheet operations.
-
purpleailab Skill Exploit XxeXML External Entity (XXE) injection — local file reading via XML parsers, SOAP/WSDL API exploitation, blind out-of-band exfiltration, SVG/DOCX/XLSX upload XXE. Use for any challenge involving XML processing, SOAP endpoints, WSDL services, or XML-based file upload parsing.
-
purpleailab Skill SqliSQL Injection — automated and manual exploitation of unsanitized SQL queries. Covers Union-based, Error-based, Blind (Boolean/Time-based), and Stacked queries. Includes sqlmap automation with WAF bypass tamper scripts.
-
purpleailab Skill SQL InjectionHunt SQL injection (CWE-89) via source-level taint tracking. Covers string concat, format-string, ORM raw queries, second-order injection, and NoSQL injection in MongoDB/DynamoDB.
-
odjaramillo Bundle DatabaseDatabase design patterns, SQL best practices, and data modeling guidelines. Trigger: When designing schemas, writing SQL, or implementing database security.
-
odjaramillo Skill Segment CdpExpert patterns for Segment Customer Data Platform including Analytics.js, server-side tracking, tracking plans with Protocols, identity resolution, destinations configuration, and data governance best practices. Use when: segment, analytics.js, customer data platform, cdp, tracking plan.
-
odjaramillo Skill Style GuideSQL Naming, Formatting, and Style Guide Trigger: When following database naming conventions.
-
sairam0424 Skill Real Time AnalyticsSkill — Real-Time Analytics
-
sairam0424 Skill Analytics InstrumentationSkill — Analytics Instrumentation (Privacy-Aware Event Architecture)
-
purpleailab Skill Blind SqliBlind SQL injection under hostile WAF — manual bypass playbook for when sqlmap fails because common tokens (SUBSTRING, IF, AND, WHERE, single quotes) are filtered. Covers token-fingerprinting probe loops, arithmetic-multiplication boolean evaluation, hex-encoded literals, and exponential-probe binary search. Loaded on top of sqli.md when the binary oracle exists but tampers can't pass the WAF.
-
purpleailab Skill Improper Output HandlingHunt improper LLM output handling (OWASP LLM05:2025) — downstream code that trusts unstructured model output and renders / executes / shells it without sanitisation, producing XSS, SSRF, SQL injection, RCE, and SSTI via the model channel.
-
netvar1337 Bundle R2jsExecute arbitrary radare2 commands and r2js scripts via r2xsql when SQL surfaces are insufficient. Use for custom analysis passes, ESIL emulation, anything r2's tables don't expose, or to bridge SQL queries with r2 SDK behavior.
-
netvar1337 Bundle R2xsql ConnectConnect to radare2 sessions via r2xsql and bootstrap analysis. Use when starting a new SQL session, routing to other skills, or setting up CLI/HTTP/MCP connections.
-
netvar1337 Bundle R2xsql FunctionsReference for the SQL helper functions and SQLite built-ins available in r2xsql queries — string utilities, hex/int coercion, regex. Use when looking up how to format addresses, search by pattern, or coerce between numeric/text columns.
-
netvar1337 Bundle Router Reverse Skill Router Pentest ToolsActive penetration testing toolchain. Covers reconnaissance, port scanning, vulnerability scanning, web penetration, SQL injection, directory brute forcing, password cracking, and similar scenarios. Exposes 20+ security tools to the AI agent via MCP servers (pentestMCP / mcp-security-hub). Trigger keywords: penetration testing, port scanning, Nmap, vulnerability scanning, Nuclei, SQL injection, SQLMap, directory brute force, FFUF, password cracking, Hashcat, reconnaissance, subdomains, web pentest, ZAP, Burp.
-
ur-grue Bundle Performance Report WriterWrites a structured monthly or quarterly YouTube channel performance report from raw analytics data, with metric summaries, trend observations, and specific next-step recommendations.
-
ur-grue Bundle Publication Timing AdvisorRecommends the best day and time to publish a piece of content based on the content type, platform, and intended audience — without requiring access to live analytics data.
-
tangledgroup Bundle Duckdb 1 5 2High-performance analytical SQL database with support for nested types, vectorized execution, and seamless integration with Python, R, Java, Node.js, and WebAssembly. Use when building data analytics applications, performing ad-hoc queries on CSV/Parquet/JSON files, working with DataFrames (pandas, Polars), or needing an embedded OLAP database without server infrastructure.
-
tangledgroup Bundle Duckdb 1 5 3Complete toolkit for DuckDB 1.5.3, an in-process SQL OLAP database management system. Covers SQL queries, data import/export (CSV, JSON, Parquet), Python API (Relations, UDFs, DB-API), nested types, window functions, and extensions. Use when writing SQL queries against local files or embedded databases, performing analytical data processing in Python, ingesting data from CSV/JSON/Parquet, or building data pipelines with DuckDB.
-
tangledgroup Bundle Pandas 3 0 3Complete toolkit for pandas 3.0.3 providing DataFrame and Series data structures, tabular data manipulation, groupby aggregations, merging/joining, reshaping, time series analysis, I/O for CSV/JSON/Parquet/Excel/SQL/Iceberg, PyArrow integration, Copy-on-Write semantics, and the new default string dtype. Use when building Python programs that require data wrangling, exploratory analysis, ETL pipelines, statistical summaries, or any workflow centered on labeled tabular data.
-
tangledgroup Bundle Rqlite 9 4 0Comprehensive toolkit for rqlite 9.4, a lightweight distributed relational database built on SQLite with Raft consensus. Use when deploying fault-tolerant databases, building edge/IoT applications with SQL, creating globally distributed read-intensive systems, or needing simple high-availability without complex administration.
-
tangledgroup Bundle Parquet 2 2 0Complete toolkit for Apache Parquet 2.2.0 columnar storage format covering physical and logical types, schema definition via Thrift (parquet.thrift), encodings (PLAIN, RLE, Dictionary, Delta Binary Packed, Delta Length Byte Array, Delta String, Byte Stream Split), compression codecs (SNAPPY, GZIP, ZSTD, LZ4_RAW, BROTLI), nested data with definition/repetition levels, bloom filters, page indexes, encryption, and file layout. Use when reading, writing, or optimizing Parquet files, designing columnar storage schemas, tuning compression and encoding strategies, or implementing Parquet readers/writers.
-
tangledgroup Bundle Rqlite 10 0 1Comprehensive toolkit for rqlite 10.0.1, a lightweight distributed relational database built on SQLite with Raft consensus. Use when deploying fault-tolerant databases, building edge/IoT applications with SQL, creating distributed read-intensive systems, configuring CDC pipelines, or needing simple high-availability without complex administration.
-
tangledgroup Bundle Sqlite 3 53 0Embedded SQL database providing ACID transactions, full-text search (FTS5), spatial indexing (R-Tree), JSON processing, virtual tables, and extensions. Use when building applications requiring embedded SQL databases, performing data analysis, implementing persistent storage, or working with SQLite features from basic CRUD to advanced queries.
-
tangledgroup Bundle Openpyxl 3 1 3Complete toolkit for openpyxl 3.1.3 providing Excel xlsx/xlsm/xltx/xltm file creation, reading, writing, styling, charts, conditional formatting, data validation, tables, filters, and Pandas integration. Use when building Python programs that need to generate, modify, or read Microsoft Excel spreadsheets programmatically.
Frequently asked questions
What are Data & Analytics agent skills?
Data agent skills make AI agents useful for data work: writing SQL, cleaning datasets, building pipelines, working with spreadsheets, and producing analyses. Each skill is a reviewed SKILL.md file that teaches the agent one workflow well, ready to install in seconds.
Which Data & Analytics skills are most installed?
Popular Data & Analytics skills on SkillMD right now include analytics-setup, golang-database, golang-security. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Data & Analytics skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.