Data

• Verdict: Pass
• Confidence: Medium
• Analyzed: Feb 18, 2026, 11:18 AM
• Findings: 0
• Version: 1.0.1

Overview

The skill's files and runtime instructions match its stated purpose (end-to-end data workflows); there are no installs or hidden code, but it relies on connecting to external data sources and delivery channels without declaring required credentials — a transparency gap to be aware of.

This skill appears to be what it says: documentation for end-to-end data work with no code or installs. Before installing/using it, consider: 1) It will need credentials to access databases, APIs, email or Slack — provide only least-privilege accounts (read-only DB users, scoped API tokens) and prefer short-lived credentials when possible. 2) Confirm how the agent will request, store, and rotate any credentials it is given; avoid pasting full admin keys into chat. 3) Require the agent to show and get approval for any queries or pipeline changes that could touch production data (preview transformations and sample outputs as the skill itself recommends). 4) If you plan to enable recurring reports, restrict scheduling scope and monitor runs/logs for unexpected access. 5) Because this is instruction-only (no code reviewed), treat the guidance as a helper rather than an executable plugin — verify any automated actions in a safe/staging environment first.