analytics-engineering

SUSPICIOUS: The analytics/dbt guidance itself is coherent and largely benign, but the companion-check adds unnecessary local file inspection and a transitive skill-install instruction via `npx` to a third-party repo. This makes the skill moderately risky despite no clear credential theft or exfiltration behavior.