duckdb-skills — 9 skills

Pinned source listing — machine-checked

What declarations and files are present in this pinned source?

Pinned source declarations and file hashes were listed.

Review

Machine-checked · 2026-10-18

Run UTC: 2026-10-18T18:10:46Z
Reviewed: 2026-10-18
Published: 2026-10-18
Updated: 2026-10-18

Observations · Limitations · Evidence

What we ran

Git blob acquisition followed by static source inspection.

What we saw

Listed 9 skill declarations. Ran 22 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

Limits

Scope: acquisition and static inspection. Command results: commands.json.

developer-tools · skills · Upstream source · Upstream documentation

Pinned source inspection only; no runtime platform was exercised. UTC 2026-10-18T18:10:46Z, tree 67e8b2a4cdb19b6cf43405918b556834b3f09a2ec4947901fb20541e9afb4ea2.

No browser or computer-use tools. Pin this exact version; the stamp does not follow updates.

Full record

name: duckdb-skills — 9 skills
slug: source-skills-3b8f044a03e6790d4c749947
type: skills
category: developer-tools
example: false
evidence state: pinned_source_listing
stamp: Pinned source listing — machine-checked
summary: Pinned source declarations and file hashes were listed.
outcome: Listed 9 skill declarations. Ran 22 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.
rule results: ["The retained source tree matches its acquisition manifest.","Declared skill names (listing.json): attach-db; convert-file; duckdb-docs; install-duckdb; query; read-file; read-memories; s3-explore; spatial"]
task: What declarations and files are present in this pinned source?
setup: Git blob acquisition followed by static source inspection.
limitations: Scope: acquisition and static inspection. Command results: commands.json.
source url: https://github.com/duckdb/duckdb-skills.git
documentation url: https://github.com/duckdb/duckdb-skills.git
commit: 7feda8e01e22bc0886c86123f3884947e36d8c69
tree sha256: 67e8b2a4cdb19b6cf43405918b556834b3f09a2ec4947901fb20541e9afb4ea2
file sha256: {".claude-plugin/marketplace.json":"660ecde7c4bebec2a02934a0bda9ad4a7c9079fff6178559a44eb63917f24e95",".claude-plugin/plugin.json":"04a346022f700f87662a387e200ee4b7bfe699cc640451c78a81a0fcea466a8f",".gitignore":"479909356451295ed710b34e4d2e7111ceff0a081282b58d6f2a7ca1f787e019","LICENSE":"7e17fd31249fa875cb3b1c5e05c6c3e99b75509f6a2804ca176c217834de1dcb","README.md":"3b9ca1ae24420d24d46bb100f75f4feb80f9ef06ce2b1c96c83cee7a777561eb","skills/attach-db/SKILL.md":"778075c35b56dbb4c2a4974d2377a091f84d476dd13df28c2c546d8e22114af0","skills/convert-file/SKILL.md":"f60b4b0c136e71047d3b956b4359cf45eb716b6a0ef0f381b94a4eba1a3a738b","skills/duckdb-docs/SKILL.md":"e6388de6257665f71da783b4d4e7b3072d788c0fbc4ce280959fb3c9191d4489","skills/install-duckdb/SKILL.md":"598c588cb55c3b80d2c4ed47aed004ada95739d0ad8bc2ee61505731ff6dacd2","skills/install-duckdb/eval.sh":"071c758aa96d3ac451dfdcb2d21e11dd1b7020646d977fbf526866e8ec8bfd60","skills/query/SKILL.md":"c66aedb3a0c6efe45cbc1fdd6b819002da91b5831e13c087552c2f8eeac8ec99","skills/read-file/SKILL.md":"ab75a9963471a178e1bc0db581386d6b8fe4de98483b19008d037325d263d729","skills/read-memories/SKILL.md":"f440f63cf2687a6145b0178b72db4948fbd6059f6b099b51ac034b0b6868ec1d","skills/s3-explore/SKILL.md":"dfd81bbe0bac004e30e53e03d2f6836c64cd359ec6c8ba81b3f045a07466cbb4","skills/spatial/SKILL.md":"b016c8355524c2b8a16c4b2da352fcd4bfb76af4c4a044fdc1d4b32adb9453f1","skills/spatial/references/functions.md":"5de6db7ec195740a3c549fb50a315fb1171b4e1bf1e0d8da88fef4f534545c2b","skills/spatial/references/overture.md":"1f84cd722a6c3e8d48af5840a236166c0b1ded15d62d51678ce8765b78c811bc"}
lockfiles: ["LOCK.json"]
utc date: 2026-10-18T18:10:46Z
source date: 2026-10-16
discovered date: 2026-10-16
retested date: 2026-10-18
reviewed date: 2026-10-18
published date: 2026-10-18
modified date: 2026-10-18
reviewer: Machine-checked
harness version: toolwitness harness at commit fdb0e180ce11bc2383fb07e791350cf38103ff88
claude code version: Not applicable: static source inspection (commands.json).
model id: Not applicable: static source inspection (commands.json).
scanner version: Not applicable: static source inspection.
rulepack version: Not applicable: static source inspection.
agents: []
commands: ["Ran 22 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."]
prompt list: ["Not applicable: static source inspection (commands.json)."]
history: ["2026-10-18T18:10:46Z: pinned source inspection"]
application: {"applicationCategory":"DeveloperApplication","name":"duckdb-skills — 9 skills","operatingSystem":"Not exercised","softwareVersion":"7feda8e01e22bc0886c86123f3884947e36d8c69"}
review input: {"claims":[{"field":"summary","id":"acquired","sources":["LOCK.json","listing.json","commands.json"],"text":"Pinned source declarations and file hashes were listed."},{"field":"outcome","id":"listed","sources":["LOCK.json","listing.json","commands.json"],"text":"Listed 9 skill declarations. Ran 22 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."},{"field":"rule_results.0","id":"tree","sources":["LOCK.json","listing.json","commands.json"],"text":"The retained source tree matches its acquisition manifest."},{"field":"rule_results.1","id":"declared","sources":["LOCK.json","listing.json","commands.json"],"text":"Declared skill names (listing.json): attach-db; convert-file; duckdb-docs; install-duckdb; query; read-file; read-memories; s3-explore; spatial"}],"evidence_sha256":{"LOCK.json":"e4d471c3a2a26bbae085e72a1562522d7e2d5e381fd6c70af572c12d251fa0dd","commands.json":"5ce5faf93479ef5075c9c832ec3db2b2e9fda4e8c2c70eb283545f8ec90cf7ae","complete.json":"91b504b43905fdc009504d516c45eea831f39a1995b9e7d69987c9756c936d6f","identity.json":"50a057c347a46a0e43ffb84ee2d8bb7b2aaa6669366b370253432ce1512cb242","listing.json":"c104af308d89ba08ce741436dd83966d3327a110efd101b0ad38908dc803f993","selection.json":"0ee6cf5e2f4ac80ffc4bfc9e72e290a9fb8ed9071f6f87aa9ccbfb1f0280b786"},"identity_artifact":"identity.json"}
review: {"codex":"ed654b5b89f44531261b2d7f1e7cce4dc6645f17d75e1e9c8d9ca28fe0e53ed1","date":"2026-10-18","gates":"88260b3ebd0350b0b7db36a3093d7104398b89fbe17fa79dc5ce156fd2b8e47f","grok":"2c4828b0804cdb3ecb07a5a75e506edad15a15423d877bf015edbebe93110899","kind":"machine-checked","reviewed_sha256":"138b879f4704e6c666b23e740071a9ec2a4b60652304d8d09baf66f3d73b98a5","summary":"Deterministic gates passed; every claim rebuilt from evidence with a reviewed template; Grok reported no standing refutation."}

Downloadable evidence

transcript

Download complete transcript

Ran 22 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

sinkhole log

Download complete sinkhole log

Not applicable: static source inspection (commands.json).

canary log

Download complete canary log

Not applicable: static source inspection (commands.json).

scanner output

Download complete scanner output

Not applicable: static source inspection (commands.json).

normalized text

Download complete normalized text

{
  "listing": {
    "skills": [
      {
        "path": "skills/attach-db/SKILL.md",
        "name": "attach-db",
        "description": "Attach a DuckDB database file for use with /duckdb-skills:query. Explores the schema (tables, columns, row counts) and writes a SQL state file so subsequent queries can restore this session automatically via duckdb -init.\n",
        "files": {
          "skills/attach-db/SKILL.md": "778075c35b56dbb4c2a4974d2377a091f84d476dd13df28c2c546d8e22114af0"
        }
      },
      {
        "path": "skills/convert-file/SKILL.md",
        "name": "convert-file",
        "description": "Convert any data file to another format: CSV, Parquet, JSON, Excel, GeoJSON, and more. Use when the user says \"convert to parquet\", \"save as xlsx\", \"export as JSON\", \"make this a CSV\", \"turn into parquet\", or any variation of format-to-format conversion for data files. Also triggers when the user wants to write Parquet, Excel, or other binary formats that Claude cannot produce natively.\n",
        "files": {
          "skills/convert-file/SKILL.md": "f60b4b0c136e71047d3b956b4359cf45eb716b6a0ef0f381b94a4eba1a3a738b"
        }
      },
      {
        "path": "skills/duckdb-docs/SKILL.md",
        "name": "duckdb-docs",
        "description": "Search DuckDB and DuckLake documentation and blog posts. Returns relevant doc chunks for a question or keyword using full-text search against a locally cached index.\n",
        "files": {
          "skills/duckdb-docs/SKILL.md": "e6388de6257665f71da783b4d4e7b3072d788c0fbc4ce280959fb3c9191d4489"
        }
      },
      {
        "path": "skills/install-duckdb/SKILL.md",
        "name": "install-duckdb",
        "description": "Install or update DuckDB extensions. Each argument is either a plain extension name (installs from core) or name@repo (e.g. magic@community). Pass --update to update extensions instead of installing.\n",
        "files": {
          "skills/install-duckdb/SKILL.md": "598c588cb55c3b80d2

Excerpt shown; complete evidence is in the download.

Download full record JSON

Disclaimer

This record lists declarations and file hashes from a pinned source tree. Git command results from acquisition and static inspection are retained in commands.json. Scope: acquisition and static inspection. It is not a security or quality verdict. Changed bytes are outside this record.

Template placeholders refer to the snapshot metadata above.

Page updated 2026-10-18