Skip to content
Back to skills

Querymaster Databricks

ASecurity

Child skill of querymaster for Databricks. PLACEHOLDER: no workspace or cluster provisioned yet, only the connection template with databricks-sql-connector. Completed once access exists.

  • 17 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added September 2, 2026
ai-agentspythonbashsqlazuregitapidatabasesecurity

Works with

  • cursor
  • cli
  • api

Security analysis

A100/100

Scanned September 20, 2026

npx -y skills add CarlosCaPe/octorato --skill querymaster-databricks --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Querymaster Databricks?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Querymaster Databricks
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/carloscape-querymaster-databricks/badge)](https://www.skillsdirectory.com/skills/carloscape-querymaster-databricks)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: querymaster-databricks
description: "Child skill of querymaster for Databricks. PLACEHOLDER: no workspace or cluster provisioned yet, only the connection template with databricks-sql-connector. Completed once access exists."
---

# QueryMaster — Databricks Engine Skill (Placeholder)

> Child skill of `querymaster`. Activated when engine is Databricks.
> **Status: PLACEHOLDER** — No active workspace/cluster available yet.
> This skill will be completed when Databricks access is provisioned.

## Connection Patterns (Template)

### Python (databricks-sql-connector)
```python
from databricks import sql

conn = sql.connect(
    server_hostname=env["DATABRICKS_HOST"],       # adb-xxxx.azuredatabricks.net
    http_path=env["DATABRICKS_HTTP_PATH"],         # /sql/1.0/warehouses/xxxx
    access_token=env["DATABRICKS_TOKEN"],          # PAT or OAuth token
)
cursor = conn.cursor()
cursor.execute("SELECT 1")
```

### Python — OAuth (Azure AD)
```python
from azure.identity import DefaultAzureCredential
credential = DefaultAzureCredential()
token = credential.get_token("2ff814a6-3304-4ab8-85cb-cd0e6f879c1d/.default")  # Databricks resource ID

conn = sql.connect(
    server_hostname=env["DATABRICKS_HOST"],
    http_path=env["DATABRICKS_HTTP_PATH"],
    credentials_provider=lambda: {"Authorization": f"Bearer {token.token}"},
)
```

### connections.json entry (template)
```json
{
  "databricks_dev": {
    "engine": "databricks",
    "auth": "pat",
    "env_file": "~/Documents/github/PROJECT/.env",
    "env_vars": {
      "host": "DATABRICKS_HOST",
      "http_path": "DATABRICKS_HTTP_PATH",
      "token": "DATABRICKS_TOKEN"
    }
  }
}
```

### .env template
```bash
DATABRICKS_HOST=adb-1234567890.azuredatabricks.net
DATABRICKS_HTTP_PATH=/sql/1.0/warehouses/abcdef1234567890
DATABRICKS_TOKEN=dapi<YOUR_PERSONAL_ACCESS_TOKEN_HERE>
```

## Key Concepts

### Compute Types
- **SQL Warehouse** — Serverless/classic, for SQL analytics. Use `http_path=/sql/1.0/warehouses/...`
- **All-Purpose Cluster** — For notebooks/jobs. Use `http_path=/sql/protocolv1/o/.../...`
- **Jobs Cluster** — Ephemeral, for scheduled jobs. Not queryable interactively.

### Unity Catalog Hierarchy
```
Catalog → Schema (Database) → Table/View/Function
```
- **3-level namespace**: `catalog.schema.table`
- Default catalog: set per workspace or `USE CATALOG name;`

### Delta Lake
- Default table format on Databricks
- ACID transactions, time travel, schema evolution
- `DESCRIBE HISTORY table` — view all versions
- `SELECT * FROM table VERSION AS OF 5` — query specific version
- `OPTIMIZE table` — compact small files
- `VACUUM table RETAIN 168 HOURS` — clean old versions

## Schema Discovery Queries (Template)

```sql
-- List catalogs
SHOW CATALOGS;

-- List schemas in catalog
SHOW SCHEMAS IN catalog_name;

-- List tables in schema
SHOW TABLES IN catalog_name.schema_name;

-- Table details
DESCRIBE TABLE EXTENDED catalog.schema.table;

-- Column details
DESCRIBE catalog.schema.table;

-- Table history (Delta)
DESCRIBE HISTORY catalog.schema.table;

-- Table properties
SHOW TBLPROPERTIES catalog.schema.table;

-- Compute resources
-- (not queryable via SQL — use REST API or CLI)
```

## Safety Guards

- **Unity Catalog permissions** — Verify catalog/schema access before queries
- **Warehouse cost** — SQL Warehouses cost DBUs; warn for large scans
- **VACUUM warning** — Cannot undo; respects retention period
- **DROP protection** — Double confirmation for `DROP TABLE`, `DROP SCHEMA`, `DROP CATALOG`
- **PAT security** — Personal Access Tokens expire; rotate regularly

## TODO When Access Is Available

- [ ] Test connection with real workspace
- [ ] Discover available catalogs and schemas
- [ ] Add project-specific query patterns
- [ ] Benchmark query execution times
- [ ] Add Spark SQL-specific optimizations (partitioning, caching)
- [ ] Document DBU cost model for common query patterns

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…