360 Secure SkillHub
360 安全技能中心

motherduck-enable-self-serve-analytics

面向内部团队落地受治理的 MotherDuck 自助分析:检查数据模型、选定首个受众与用例、发布一个可信数据集、按指标负责人维护 Guide,并发布 Ready Dive 或受限角色 Share,随后审计角色与授权再逐步扩展;无可用服务器时改用提供的 schema 与显式假设做规划。

motherduckdb
热度 0.00
最近更新 2026-10-19 00:08:41
分类:数据依赖:MCP 服务 / 第三方 API / 代码执行应用场景:数据处理 / 工作流 / 报告撰写 / 任务管理

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add motherduckdb/agent-skills/motherduck-enable-self-serve-analytics
Metadata
name
motherduck-enable-self-serve-analytics
description
Roll out governed MotherDuck analytics to internal teams, choosing trusted datasets, access boundaries, and owners.
license
MIT

Enable Self-Serve Analytics

Start Here: Is a MotherDuck Server Active?

Use an active remote MotherDuck MCP server or local MotherDuck server to inspect the in-scope database, schema, grain, keys, and relevant metrics. Reuse known context and narrow discovery to the requested work; do not scan the whole workspace by default. Let the actual data model shape the result.

Resolve the target from the request or active context. Ask only if ambiguity materially affects the result. Without a server, use supplied schema and explicit assumptions for planning; do not imply live validation.

Rollout Defaults

  • first audience first, not company-wide exposure
  • curated dataset before broad access
  • Dive or share boundary over raw table dumping
  • standard ownership for metric changes
  • lightweight metric definitions and owners before inviting more users
  • a short root orientation Guide plus shallow domain Guides for definitions that agents cannot infer from schema
  • restricted Shares granted to roles; use include patterns for table/view subsets and separate Shares for different audiences

Workflow

  1. Inspect the available MotherDuck server or supplied schema context.
  2. Inspect the data model that internal teams would use.
  3. Pick the first audience and first use case.
  4. Publish one trusted dataset.
  5. When Guide maintenance is in scope, create or update the relevant Guide with the metric owner, validated definition, join rules, and referenced objects.
  6. Publish one Ready Dive or one restricted, role-granted Share.
  7. Audit the live roles, grants, and exposed catalog.
  8. Expand only after the first workflow is stable.

Match execution to the request: answer, review, or planning work returns the requested rollout artifacts; build or change work creates the requested in-scope dataset, Dive, or share and validates it. Ask before broader access grants, destructive changes, or external writes not already authorized.

When this skill produces a native DuckDB (md:) connection, watermark it with custom_user_agent=agent-skills/2.6.0(harness-<harness>;llm-<llm>). If metadata is missing, fall back to harness-unknown and llm-unknown.

Output

For a full engagement, cover the following as relevant to the request:

  • the first audience
  • the first asset
  • the governing dataset
  • the ownership model
  • the rollout guardrails

For explicit structured JSON requests, read the output contract. Otherwise use the format that fits the requested deliverable.

References

Read only the sections relevant to the task; these are guidance, not a mandatory itinerary.

  • references/SELF_SERVE_ROLLOUT_GUIDE.md -- curate-publish-expand sequence, Dive-versus-share choice, data freshness checks, scale guidance, and starter snippets

Examples

Read the execution reference only to run the bundled examples or reproduce their validation.

Related Skills

Load related skills only for missing capabilities; reuse established context.

  • motherduck-explore -- inspect the real workspace before rollout
  • motherduck-query -- validate KPI definitions
  • motherduck-model-data -- publish curated analytical views or tables
  • motherduck-create-dive -- build the first shareable answer surface
  • motherduck-manage-guides -- preserve governed metric and join context for agents
  • motherduck-share-data -- publish table/view subsets and role-granted access