Back to skills
SKILL.md
Duckdb Analytical Sql
ASecurityUse when designing schemas, querying, indexing, optimizing, and securing duckdb analytical sql databases and data models.
- 5 stars
- 0 votes
- 0 copies
- 0 views
- Added September 27, 2026
Works with
Security analysis
100/100npx -y skills add Harmitx7/tribunal-kit --skill duckdb-analytical-sql --agent claude-codeAre you the author of Duckdb Analytical Sql?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/harmitx7-duckdb-analytical-sql)---
name: duckdb-analytical-sql
description: "Use when designing schemas, querying, indexing, optimizing, and securing duckdb analytical sql databases and data models."
version: 6.0.0
last-updated: 2026-09-29
skills:
- sql-pro
- database-design
- performance-profiling
tools: Read, Grep, Glob, Bash, Edit, Write
scripts-binding:
- .agent/scripts/schema_validator.js
- .agent/scripts/lint_runner.js
- .agent/scripts/verify_all.js
---
# DuckDB Analytical SQL β Embedded Analytics
## Mandatory Pre-Flight Context Inspection
Before reading, generating, or refactoring code in the `duckdb-analytical-sql` domain, inspect these 5 critical parameters:
1. **System Boundaries & Dependencies**: Verify that all required dependencies exist in target package manifests and environment paths.
2. **Runtime Context & Platform Invariants**: Confirm target platform constraints (Node.js, Browser, Mobile OS, Edge runtime) before applying APIs.
3. **Execution Guardrails**: Identify potential side-effects, state mutations, and unhandled asynchronous exceptions.
4. **Validation & Type Contracts**: Validate input data schemas and strict type constraints across all module interfaces.
5. **Observability & Proof of Execution**: Ensure execution produces tangible verification signals (terminal output, tests, metrics).
## Activation Boundaries
- **Activate when:** Use when designing schemas, querying, indexing, optimizing, and securing duckdb analytical sql databases and data models.
- **DO NOT activate when:** The task falls outside the `duckdb-analytical-sql` domain or is managed by a different dedicated specialist agent.
## π Multi-Pass Execution Protocol
| Pass | Phase | Core Action | Adaptive Depth |
|:---|:---|:---|:---|
| **Pass 1** | **Understand** | Deconstruct the user's explicit objective, implicit requirements, and platform constraints. | Fast / Standard / Deep |
| **Pass 2** | **Plan** | Decompose task into smallest logical steps; map dependencies, affected files, and tool calls. | Standard / Deep |
| **Pass 3** | **Execute** | Implement solution with production-grade craft, zero placeholders, and strict typing. | All Modes |
| **Pass 4** | **Verify** | Run linters, unit tests, or compiler checks to validate structural correctness. | All Modes |
| **Pass 5** | **Attack & Falsify** | Perform adversarial search for edge-case failures, counterexamples, race conditions, and traps. | Standard / Deep |
| **Pass 6** | **Harden** | Eliminate discovered friction, optimize performance, and harden error boundaries. | Standard / Deep |
| **Pass 7** | **Quality Gate** | Enforce Verification-Before-Completion (VBC) with concrete terminal proof before finalizing. | All Modes |
---
## π οΈ Technical Architecture & Reference Recipes
## Node.js DuckDB Parquet Query Pattern
```typescript
import { Database } from 'duckdb-async';
export async function runAnalyticalReport(parquetGlobPath: string) {
const db = await Database.create(':memory:');
// Set memory limits for embedded execution
await db.exec("SET max_memory = '2GB'; SET threads = 4;");
const rows = await db.all(
`
SELECT
date_trunc('day', timestamp) as event_day,
event_type,
COUNT(*) as total_count,
QUANTILE_CONT(duration_ms, 0.95) as p95_latency
FROM read_parquet(?)
GROUP BY 1, 2
ORDER BY 1 DESC
LIMIT 100
`,
[parquetGlobPath],
);
return rows;
}
```
## π¨ Edge-Case & Failure Mode Matrix
| Scenario | Risk | Production Mitigation |
|:---|:---|:---|
| **Empty or Null Inputs** | Unhandled exception or unexpected rendering collapse | Enforce fallback guards, optional chaining, and explicit empty state handlers |
| **Network Timeout / Latency** | Hanging operations or duplicate side-effects | Implement bounded abort controllers, exponential backoff, and idempotency keys |
| **Concurrency / Race Conditions** | Stale state overwrite or inconsistent data mutations | Use atomic transactions, mutex locking, or cancel-on-resubmit controls |
| **Invalid Schema / Malformed Payload** | Downstream runtime errors or security injection | Validate boundary payloads with Zod/Pydantic schemas prior to execution |
| **Resource / Memory Saturation** | OOM errors, frame drops, or memory leaks | Clean up listeners, cancel active timers, and enforce pagination/virtualization |
## π€ LLM-Specific Traps Table
| Anti-Pattern | What AI Commonly Does Wrong | What Is Actually Correct |
|:---|:---|:---|
| **Full Table Scan Blindspot** | Querying high-cardinality tables without index coverage | Verify query plans with EXPLAIN ANALYZE and add composite B-Tree indexes |
| **Non-Atomic Batch Mutation** | Executing multiple related DB writes sequentially without transaction wrapper | Wrap multi-table updates in an atomic transaction with automatic rollback |
| **Destructive Schema Migration** | Dropping or renaming columns in production without multi-phase migration | Use expand-and-contract: add new column, sync data, migrate callers, drop old |
## ποΈ Tribunal Verification & Guardrails
**Active Reviewers:** `database-architect` Β· `sql-pro` Β· `security-auditor` Β· `schema-validator`
**Slash Command:** `/review` or `/tribunal-full`
### π¬ Evidence Standard (Tri-State Verification)
Every finding, audit statement, or completion claim must classify its factual certainty:
- **`[OBSERVED]`**: Directly confirmed in the codebase or verified via executed terminal command.
- **`[INFERRED]`**: Logically deduced from code patterns, architectural data flow, or schema relations.
- **`[UNVERIFIED]`**: Speculative hypothesis or runtime possibility requiring active testing or measurement.
### β
Pre-Flight Self-Audit Checklist
```
β
Are all queries parameterized against SQL injection vulnerabilities?
β
Are composite indexes ordered by Equality, Sort, then Range (ESR)?
β
Are multi-table writes wrapped in atomic transactions with rollback handlers?
β
Are schema migrations backwards-compatible (expand-and-contract pattern)?
β
Did I verify table and column names against active schema definitions?
```
### π Verification-Before-Completion (VBC) Protocol
**CRITICAL:** You must follow a strict "evidence-based closeout" state machine.
- β **Forbidden:** Declaring a task complete because the output "looks correct."
- β
**Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing test suites, compiler success, or equivalent operational proof) that your output works as intended.
Attribution
Comments
Loading commentsβ¦