The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions in SKILL.md for the user to install the DuckDB CLI via a shell script from the official domain (https://install.duckdb.org). This is a standard and well-recognized installation method for this utility.
[COMMAND_EXECUTION]: The skill uses the Bash tool to execute duckdb CLI commands for tasks such as schema extraction, metadata retrieval, and data sampling. These operations are scoped to the local environment and the specific database files provided by the user.
[INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it ingests and processes content from external files like .ddb, .csv, and .parquet.
Ingestion points: Data is read from source files via duckdb commands (e.g., DESCRIBE, SELECT DISTINCT) as defined in the SKILL.md setup and enum detection sections.
Boundary markers: The instructions do not specify explicit delimiters or "ignore instructions" warnings to the agent for the content of the data records it samples.
Capability inventory: The skill is permitted to use Bash (for database CLI execution), Read, Glob, and Grep for file system interactions.
Sanitization: There is no evidence of content filtering or sanitization applied to the data values extracted from the user's files during sampling.

duckdb-sql