The Agent Skills Directory

[SAFE]: The skill contains standard documentation for the DuckDB Python library, including connection management, query execution, and data frame interoperability.
[INDIRECT_PROMPT_INJECTION]: The skill describes methods for ingesting data from untrusted external sources (CSV, Parquet, JSON). It includes explicit security guidance to use parameterization for values and warns that table/column names should only be constructed via f-strings from trusted input, aligning with secure coding practices.
[EXTERNAL_DOWNLOADS]: The skill mentions installation via pip install duckdb and the use of the install_extension method for DuckDB extensions. These are official vendor-supported methods for managing the tool's lifecycle and dependencies.

duckdb-python