source-snowflake-query

Read-only source adapter: Snowflake query in, raw JSONL rows out. This skill does not normalize vendor data, detect threats, or write back to Snowflake. It exists so operators and agents can fetch already-landed lake data and pipe it into the existing ingest-*, detect-*, discover-*, or view/* skills.

Use when

• Security data already lives in Snowflake
• You want to fetch rows directly into a skill pipeline
• You need a read-only source step before ingest-* or detect-*

Do NOT use

• For INSERT, UPDATE, DELETE, MERGE, COPY, CREATE, ALTER, DROP, or grant operations
• As a detection or remediation skill
• When the source data is not in Snowflake