Data & Analytics
Data agent skills make AI agents useful for data work: writing SQL, cleaning datasets, building pipelines, working with spreadsheets, and producing analyses. Each skill is a reviewed SKILL.md file that teaches the agent one workflow well, ready to install in seconds.
-
netvar1337 Bundle Xxe Injection Methodology 2XML外部实体注入(XXE)的检测与利用方法论。当目标有 XML 解析、SOAP API、文件上传（DOCX/XLSX/SVG）、或任何接受 XML 输入的端点时使用。包含基础文件读取、盲 XXE 外带（参数实体+外部DTD）、SVG/DOCX XXE、SOAP Envelope XXE、JSON→XML 转换攻击。即使 API 文档说只接受 JSON，也应尝试 XML Content-Type 测试隐式 XXE。
-
holobiomicslab Skill Lc Ms Dataset Acquisition And Curation 3Use when when beginning an untargeted LC-MS metabolomics study and need to assemble a cohort of mzML files for processing; particularly when establishing performance baselines across sample counts (10, 50, 100+ samples), validating reproducibility, or preparing data for publication.
- holobiomicslab Skill Cohort Stratified Metabolic Performance Analysis 3
Use when when you have uploaded a pre-analytical data table containing sample metadata, processing delay annotations (pre- and post-centrifugation times), and paired NMR metabolomic measurements for a plasma or serum cohort, and you need to determine how processing delays impact metabolite.
- holobiomicslab Skill Metadata Normalization And Reconciliation 2
Use when you have multiple CSV feature lists from different acquisition methods (e.g., LC-MS vs LC-IMS-MS) or processing software, each using different naming conventions, retention time scales, or m/z precision;
- holobiomicslab Skill Chromatogram Plot Generation Retention Time 2
Use when you have mass spectrometry data loaded as a Pandas DataFrame with retention time and intensity columns, and you need to visualize the overall or mass-trace-specific signal intensity distribution across the chromatographic separation.
- holobiomicslab Skill Feature List Harmonization Across Methods 2
Use when you have feature lists in CSV format originating from different acquisition methods (e.
- holobiomicslab Skill Reference Based Vs Global Coordinate Registration 2
Use when you have detected feature tables from multiple LC-IMS-MS/MS samples (each with mz, drift_time, retention_time, and intensity columns) and need to match corresponding features across datasets to enable cross-sample quantitation or cohort analysis.
- netvar1337 Skill PHP Exploit Chain 2
PHP 审计漏洞链组装方法论。当已完成各分类漏洞审计、需要评估多个漏洞组合利用的可行性时触发。 覆盖: 文件写入→文件包含→RCE 链、反序列化→敏感操作链、SQL 注入→文件写入链、 SSRF→内部服务链、信息泄露→权限提升链。同时包含 Composer 依赖 CVE 扫描方法。
- netvar1337 Bundle Web Vuln Scan 2
单目标 Web 深度漏洞扫描策略。当已知目标 URL、需要对一个 Web 应用进行深度漏洞测试时使用。与 recon-full（资产发现）不同——本技能假设目标已确定，聚焦漏洞层面的深度测试。覆盖指纹驱动的扫描策略选择、自动化+手动测试结合、漏洞优先级排序。优先发现 RCE、SQL注入等高危漏洞
- netvar1337 Bundle Ldap Injection 2
LDAP 注入检测与利用。当目标有 LDAP 认证入口（企业登录/SSO/统一认证）、发现 389/636/3268/3269 端口、URL 参数中出现 uid/cn/ou/dc 等 LDAP 属性名、或后端使用 LDAP 进行用户查询时使用。LDAP 注入与 SQL 注入思路类似但语法不同——通过注入 LDAP 搜索过滤器操作符来绕过认证或提取数据。在域环境和企业内网中常见，与 AD 域攻击配合可以获取域用户凭据。发现任何 LDAP 相关入口、Active Directory 集成认证、或 LDAP 查询参数时都应使用此 skill
- netvar1337 Bundle JWT Attack Methodology 2
JWT Token 攻击方法论。当响应头/Cookie 中出现 eyJ 开头的字符串（三段式 base64，Header.Payload.Signature）、Authorization: Bearer token、API 返回 token/access_token 字段时使用。包含 alg:none 绕过、弱密钥爆破（hashcat/john/c-jwt-cracker/jwt_tool 完整工具链）、Claims 篡改提权、RS256->HS256 算法混淆、kid 注入（SQL/路径穿越/命令注入）、jku/x5u 替换。注意：非 JWT 的 Cookie 分析请使用 cookie-analysis
- netvar1337 Bundle Threat Hunting Evasion 2
威胁猎杀原理与规避方法论。理解蓝队如何主动猎杀（Hypothesis-driven / IOC-driven / Analytics-driven），红队如何设计行为使自己不被猎杀到。当需要评估自身操作是否可被威胁猎杀发现时使用
- netvar1337 Skill Cross Domain Attack Chain 2
Web 与 AI 跨域攻击链方法论。当目标系统同时包含传统 Web 应用和 AI/LLM 组件、 需要评估 Web 漏洞对 AI 系统的影响或 AI 漏洞对 Web 系统的影响时触发。 覆盖双向攻击链: Web→AI(XSS 窃取对话/SSRF 调用模型 API/SQLi 污染 RAG/文件上传 RAG 投毒) 和 AI→Web(注入生成存储型 XSS/Agent 执行 SQL 命令/工具读取敏感文件/沙箱逃逸 RCE)。
-
ericgrill Skill Gong Automation 2Automate Gong conversation intelligence -- retrieve call recordings, transcripts, detailed analytics, speaker stats, and workspace data -- using natural language through the Composio MCP integration.
- ericgrill Skill Excel Automation 2
Excel Automation: create workbooks, manage worksheets, read/write cell data, and format spreadsheets via Microsoft Excel and Google Sheets integration
- ericgrill Skill Googleads Automation 2
Automate Google Ads analytics tasks via Rube MCP (Composio): list Google Ads links, run GA4 reports, check compatibility, list properties and accounts. Always search tools first for current schemas.
- ericgrill Skill Snowflake Automation 2
Automate Snowflake data warehouse operations -- list databases, schemas, and tables, execute SQL statements, and manage data workflows via the Composio MCP integration.
- ericgrill Skill Customer Io Automation 2
Automate customer engagement workflows including broadcast triggers, message analytics, segment management, and newsletter tracking through Customer.io via Composio
- ericgrill Skill Survey Monkey Automation 2
Automate SurveyMonkey tasks via Rube MCP (Composio): surveys, responses, collectors, and survey analytics. Always search tools first for current schemas.
- ericgrill Skill Googlebigquery Automation 2
Automate Google BigQuery tasks via Rube MCP (Composio): run SQL queries, explore datasets and metadata, execute MBQL queries via Metabase integration. Always search tools first for current schemas.
- ericgrill Skill Simple Analytics Automation 2
Automate Simple Analytics tasks via Rube MCP (Composio). Always search tools first for current schemas.
- ericgrill Skill Microsoft Clarity Automation 2
Automate Microsoft Clarity tasks via Rube MCP (Composio): session recordings, heatmaps, and user behavior analytics. Always search tools first for current schemas.
- ericgrill Skill Rosette Text Analytics Automation 2
Automate Rosette Text Analytics tasks via Rube MCP (Composio). Always search tools first for current schemas.
-
jiayaoqijia Bundle Cmc MCP 2Fetches cryptocurrency market data, prices, technical analysis, news, and trends using the CoinMarketCap MCP. Use for ANY question involving cryptocurrencies, tokens, or blockchain markets, even if the user doesn't explicitly ask for data. This includes price checks, portfolio questions, market analysis, coin comparisons, holder metrics, technical indicators, and news. Trigger: "bitcoin", "ETH", "crypto", "token price", "market cap", "how is [coin] doing", "/cmc-mcp"
- jiayaoqijia Bundle Cmc API Crypto 2
API reference for CoinMarketCap cryptocurrency endpoints including quotes, listings, OHLCV, trending, and categories. Use this skill whenever the user mentions CMC API, asks how to get crypto data programmatically, wants to build price integrations, or needs REST endpoint documentation. This is the go-to reference for any CMC cryptocurrency API question. Trigger: "CMC API", "coinmarketcap api", "crypto price API", "get bitcoin price via API", "/cmc-api-crypto"
- jiayaoqijia Bundle Cmc API Market 2
API reference for CoinMarketCap market-wide endpoints including global metrics, fear/greed, indices, trending topics, and charts. Use this skill whenever the user mentions market API, asks about fear/greed index, wants global metrics or BTC dominance data, needs k-line charts, or is working with market sentiment. This is the complete reference for CMC market-wide API questions. Trigger: "market API", "fear greed API", "global metrics API", "CMC charts API", "/cmc-api-market"
- jiayaoqijia Bundle Defillama API 2
使用 DefiLlama API/SDK 获取 TVL、stablecoins、coins 价格、yields、volumes、fees、perps、unlocks、bridges、ETFs、narratives、token liquidity、main page、DAT、meta 等数据的 CLI 技能；当需要用命令行调用 DefiLlama 数据时使用。
- jiayaoqijia Bundle Fear Greed MCP 2
Crypto Fear & Greed Index data for market sentiment tracking. Access current and historical index values to gauge overall market emotion.
- jiayaoqijia Bundle Crypto Research 2
Research cryptocurrency tokens, verify smart contracts, check perpetual futures data, governance proposals, and on-chain analytics. Use when asked about token research, contract verification, is this token safe, rug pull check, Hyperliquid perps, funding rates, governance vote, Dune analytics, token due diligence, or security audit status.
- jiayaoqijia Bundle Pyth MCP Server 2
Pyth MCP Server
- jiayaoqijia Bundle Defillama MCP 2
DefiLlama MCP server for querying TVL, yields, stablecoin data, and protocol analytics across all DeFi.
- jiayaoqijia Bundle Cmc API Exchange 2
API reference for CoinMarketCap exchange endpoints including exchange info, volume, market pairs, and assets. Use this skill whenever the user mentions exchange API, asks about exchange volumes, wants trading pair data, needs proof-of-reserves info, or is building exchange integrations. This is the authoritative reference for CMC exchange API questions. Trigger: "exchange API", "CMC exchange data", "trading pairs API", "exchange volume API", "/cmc-api-exchange"
- jiayaoqijia Bundle Fear Greed Index 2
Crypto Fear & Greed Index
- jiayaoqijia Bundle Nansen Portfolio Tracker 2
How has a wallet's portfolio changed over time? Historical balances, current snapshot, and per-token PnL.
- jiayaoqijia Bundle Pyth Price Agent 2
Pyth Price Feed Agent
- jiayaoqijia Bundle Arthur MCP Server 2
Arthur MCP Server
Frequently asked questions
What are Data & Analytics agent skills?
Data agent skills make AI agents useful for data work: writing SQL, cleaning datasets, building pipelines, working with spreadsheets, and producing analyses. Each skill is a reviewed SKILL.md file that teaches the agent one workflow well, ready to install in seconds.
Which Data & Analytics skills are most installed?
Popular Data & Analytics skills on SkillMD right now include xxe-injection-methodology, lc-ms-dataset-acquisition-and-curation, cohort-stratified-metabolic-performance-analysis. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do Data & Analytics skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.