source-databricks-query

Read-only source adapter: Databricks SQL query in, raw JSONL rows out. This skill does not normalize vendor data, detect threats, or write back to Databricks. It exists so operators and agents can fetch already-landed lake data and pipe it into the existing ingest-*, detect-*, discover-*, or view/* skills.

Use when

• Security data already lives in Databricks SQL
• You want to fetch rows directly into a skill pipeline
• You need a read-only source step before ingest-* or detect-*

Do NOT use

• For INSERT, UPDATE, DELETE, MERGE, COPY, CREATE, ALTER, DROP, or grant operations
• As a detection or remediation skill
• When the source data is not in Databricks