Data & Analytics
Data agent skills make AI agents useful for data work: writing SQL, cleaning datasets, building pipelines, working with spreadsheets, and producing analyses. Each skill is a reviewed SKILL.md file that teaches the agent one workflow well, ready to install in seconds.
-
tomevault-io Bundle SQL 5SQL patterns for database querying and design Use when this capability is needed.
-
tomevault-io Bundle Databases 4Skills for attacking database services including SQL, NoSQL, and in-memory databases. Use when this capability is needed.
-
tomevault-io Bundle Security Review 14Code security review covering OWASP Top 10, injection prevention (SQL, XSS, command injection), authentication and authorization patterns, secrets management, dependency vulnerability scanning, input validation, CORS, CSRF, rate limiting, and security headers. Language-agnostic with examples in JavaScript, Python, and Go. Use when reviewing code for security or hardening an application. Use when this capability is needed.
-
tomevault-io Bundle SQL 6Expert SQL development with focus on query optimization, indexing strategies, and data modeling. Use when this capability is needed.
-
tomevault-io Bundle Logging 3Structured client-side logging and error reporting. Use when implementing console logging, error tracking, user session tracking, or analytics event patterns. Use when this capability is needed.
-
tomevault-io Bundle Data Analysis 5Analyze CSV and tabular data, create summaries, and generate insights Use when this capability is needed.
-
tomevault-io Bundle Polars 2Fast DataFrame library (Apache Arrow). Select, filter, group_by, joins, lazy evaluation, CSV/Parquet I/O, expression API, for high-performance data analysis workflows. Use when this capability is needed.
-
tomevault-io Bundle Validate 8Validate SQL and report diagnostics using syntaqlite. Use when the user wants to check SQL for errors, lint SQL files, or verify correctness against a schema. Use when this capability is needed.
-
tomevault-io Bundle DB Access Analysis 2Goプロジェクト内でDBアクセス(CRUD)が発生している関数・テーブルをisucrudで解析し、コーディングエージェントが「どの関数からどのテーブルにINSERT/UPDATE/DELETE/SELECTが行われるか」を把握するためのスキル。キャッシュ対象の判断、N+1の特定、DBアクセスを伴う関数の影響範囲調査、リファクタリング前のCRUD確認などに使用する。Go (database/sql, sqlx 等) で書かれたプロジェクトが対象。 Use when this capability is needed.
-
tomevault-io Bundle Drizzle Orm 3Type-safe SQL ORM for TypeScript with zero runtime overhead Use when this capability is needed.
-
tomevault-io Bundle Backend Queries 2Write secure, performant database queries using parameterized statements, proper indexing, and query optimization techniques. Use this skill when writing SQL queries, ORM query methods, or database access code. When implementing data fetching logic that retrieves or updates database records. When optimizing queries to prevent N+1 problems through eager loading or joins. When using WHERE clauses, JOIN operations, or ORDER BY statements. When implementing transactions for related database operations. When working with query builder methods, raw SQL, or ORM query interfaces. When setting query timeouts or implementing query result caching. Use when this capability is needed.
-
tomevault-io Bundle Ab Testing 2Production A/B testing lifecycle for design variants. Covers hypothesis formation, feature flags, variant comparison, analytics tracking, statistical significance analysis, experiment setup, and cleanup. Use when this capability is needed.
-
tomevault-io Bundle Security Scan 6Main security scanning orchestration. Detects language, runs OWASP Top 10 patterns, identifies vulnerabilities, generates structured reports. Use when scanning for XSS, SQL injection, command injection, secrets, or any security vulnerability. Use when this capability is needed.
-
tomevault-io Bundle Global Validation 2Implement secure, comprehensive input validation on both client and server sides using allowlists, type checking, and sanitization to prevent injection attacks. Use this skill when handling user input from forms, API requests, or any external data source. When implementing form validation logic with field-specific error messages. When validating data types, formats, ranges, and required fields. When sanitizing input to prevent SQL injection, XSS, or command injection. When validating business rules like sufficient balance or valid date ranges. When implementing both client-side validation for user experience and mandatory server-side validation for security. Use when this capability is needed.
-
tomevault-io Bundle Postgresql 6PostgreSQL database documentation - SQL queries, database design, administration, performance tuning, and advanced features. Use when working with PostgreSQL databases, writing SQL, or managing database systems. Use when this capability is needed.
-
tomevault-io Bundle Code Reviewer 38Analyzes code diffs and files to identify bugs, security vulnerabilities (SQL injection, XSS, insecure deserialization), code smells, N+1 queries, naming issues, and architectural concerns, then produces a structured review report with prioritized, actionable feedback. Use when reviewing pull requests, conducting code quality audits, identifying refactoring opportunities, or checking for security issues. Invoke for PR reviews, code quality checks, refactoring suggestions, review code, code quality. Complements specialized skills (security-reviewer, test-master) by providing broad-scope review across correctness, performance, maintainability, and test coverage in a single pass.
-
tomevault-io Bundle Security 19Scan a repository for security vulnerabilities — SSRF, injection (SQL, command, query-language), path traversal, unsafe deserialization, secret exposure, GitHub Actions injection, and missing rate-limit handling. Uses grep patterns plus contextual code reading to reduce false positives. Use when this capability is needed.
-
tomevault-io Bundle SQL Schema 2Database Architect skill. Use this when you need to modify the database schema, add tables, or seed data. This project uses RAW SQL SCRIPTS orchestrated by .NET Aspire, NOT Entity Framework Migrations. Use when this capability is needed.
-
tomevault-io Bundle Go Database 2Greenfield Go database workflow for database/sql, pgx, migrations, transactions, pooling, query correctness, test databases, and safe data boundaries. Use when this capability is needed.
-
tomevault-io Bundle Golang Security 4Security best practices and vulnerability prevention for Golang. Covers injection (SQL, command, XSS), cryptography, filesystem safety, network security, cookies, secrets management, memory safety, and logging. Apply when writing, reviewing, or auditing Go code for security, or when working on any risky code involving crypto, I/O, secrets management, user input handling, or authentication. Includes configuration of security tools. Use when this capability is needed.
-
tomevault-io Bundle Grdb 2Use when writing raw SQL with GRDB, complex joins across 4+ tables, window functions, ValueObservation for reactive queries, or dropping down from SQLiteData for performance. Direct SQLite access for iOS/macOS with type-safe queries and migrations.
-
tomevault-io Bundle Dask 2Distributed computing for larger-than-RAM pandas/NumPy workflows. Use when you need to scale existing pandas/NumPy code beyond memory or across clusters. Best for parallel file processing, distributed ML, integration with existing pandas code. For out-of-core analytics on single machine use vaex; for in-memory speed use polars. Use when this capability is needed.
-
tomevault-io Bundle Vaex 2Use this skill for processing and analyzing large tabular datasets (billions of rows) that exceed available RAM. Vaex excels at out-of-core DataFrame operations, lazy evaluation, fast aggregations, efficient visualization of big data, and machine learning on large datasets. Apply when users need to work with large CSV/HDF5/Arrow/Parquet files, perform fast statistics on massive datasets, create visualizations of big data, or build ML pipelines that do not fit in memory.
-
tomevault-io Bundle Django Security 8Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations. Use when this capability is needed.
-
tomevault-io Bundle Golang Database 3Comprehensive guide for Go database access — parameterized queries, struct scanning, NULLable columns, transactions, isolation levels, SELECT FOR UPDATE, connection pool, batch processing, context propagation, and migration tooling. Use when writing, reviewing, or debugging Golang code that interacts with PostgreSQL, MariaDB, MySQL, or SQLite; for database testing; or for questions about database/sql, sqlx, or pgx. Does NOT generate database schemas or migration SQL. Use when this capability is needed.
-
tomevault-io Bundle Golang Security 3Security best practices and vulnerability prevention for Golang. Covers injection (SQL, command, XSS), cryptography, filesystem safety, network security, cookies, secrets management, memory safety, and logging. Apply when writing, reviewing, or auditing Go code for security, or when working on any risky code involving crypto, I/O, secrets management, user input handling, or authentication. Includes configuration of security tools. Use when this capability is needed.
-
tomevault-io Bundle Data Analyst 2Use when working with a data analyst skill that guides Claude through structured, professional data analysis workflows. Use this skill when the user requests data analysis work including analyze, query, dashboard, metrics, EDA, cohort, funnel, or A/B testing.
-
tomevault-io Bundle DB Query 2This skill enables querying Spanner databases through the AfterShip DSP API. It uses the go-admin-automizely-cli library to obtain authentication tokens and execute SQL queries against Spanner databases in different environments. Use when this capability is needed.
-
tomevault-io Bundle Django Security 9Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations. Use when this capability is needed.
-
tomevault-io Bundle Database Patterns 3Use when designing database schemas, implementing repository patterns, writing optimized queries, managing migrations, or working with indexes and transactions for SQL/NoSQL databases.
-
tomevault-io Bundle Database 9Database design, SQL, NoSQL, and data management patterns Use when this capability is needed.
-
tomevault-io Bundle Engage Indicators 2Manage indicators and metrics in the Engage Analytics dbt project. Use when working with healthcare analytics indicators, adding new metrics, creating questionnaire response models, or understanding the metrics architecture. Triggers on requests involving indicator creation, metric definitions, questionnaire data models, PHQ-9/GAD-7 scores, mwTool eligibility, or dbt model development for Engage. Use when this capability is needed.
-
tomevault-io Bundle Duckdb 2Use when working with an analytical in-process SQL database management system. Designed for fast analytical queries (OLAP). Highly interoperable with Python's data ecosystem (Pandas, NumPy, Arrow, Polars). Supports querying files (CSV, Parquet, JSON) directly without an ingestion step. Use for complex SQL queries on Pandas/Polars data, querying large Parquet/CSV files directly, joining data from different sources, analytical pipelines, local datasets too big for Excel, intermediate data storage and feature engineering for ML.
-
tomevault-io Bundle Polars 3Blazingly fast DataFrame library written in Rust. Features a multi-threaded query engine, lazy evaluation, and efficient memory usage via Apache Arrow. Designed for high-performance data processing on a single machine. Use for large datasets (1GB-100GB+), fast data transformations, Parquet/CSV processing, complex query pipelines, memory-efficient operations, and when speed is critical (10-100x faster than pandas). Use when this capability is needed.
-
tomevault-io Bundle Golang Database 4Comprehensive guide for Go database access. Covers parameterized queries, struct scanning, NULLable column handling, error patterns, transactions, isolation levels, SELECT FOR UPDATE, connection pool, batch processing, context propagation, and migration tooling. Use this skill whenever writing, reviewing, or debugging Golang code that interacts with PostgreSQL, MariaDB, MySQL, or SQLite. Also triggers for database testing or any question about database/sql, sqlx, pgx, or SQL queries in Golang. This skill explicitly does NOT generate database schemas or migration SQL. Use when this capability is needed.
-
tomevault-io Bundle Spreadsheet 2Use when tasks involve creating, editing, analyzing, or formatting spreadsheets (`.xlsx`, `.csv`, `.tsv`) using Python (`openpyxl`, `pandas`), especially when formulas, references, and formatting need to be preserved and verified.
Frequently asked questions
What are Data & Analytics agent skills?
Data agent skills make AI agents useful for data work: writing SQL, cleaning datasets, building pipelines, working with spreadsheets, and producing analyses. Each skill is a reviewed SKILL.md file that teaches the agent one workflow well, ready to install in seconds.
Which Data & Analytics skills are most installed?
Popular Data & Analytics skills on SkillMD right now include security, sql, databases. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Data & Analytics skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.