data-analysis
Analyses tabular or experimental data rigorously - profiles the data first, checks for leakage between train and test splits, chooses statistical tests whose assumptions hold, reports effect sizes and confidence intervals rather than bare p-values, corrects for multiple comparisons, and keeps notebooks reproducible. Use for exploratory analysis, statistics, A/B or experiment analysis, dataset checks, data leakage, p-values, or cleaning and validating datasets.
- License 许可
- Apache-2.0
- 最近更新
- 2026-10-19
- Stars
- ★ 2
- Forks
- 0
01 前言 Front Matter
- name
- data-analysis
- license
- Apache-2.0
- metadata
- { "risk": "low", "version": "0.1.0", "category": "data", "maturity": "draft" }
- description
- Analyses tabular or experimental data rigorously - profiles the data first, checks for leakage between train and test splits, chooses statistical tests whose assumptions hold, reports effect sizes and confidence intervals rather than bare p-values, corrects for multiple comparisons, and keeps notebooks reproducible. Use for exploratory analysis, statistics, A/B or experiment analysis, dataset checks, data leakage, p-values, or cleaning and validating datasets.
02 资源文件 3
- 参考文档evals/cases.yaml2.9 KB
- 参考文档manifest.yaml832 B
- 脚本scripts/leakage_check.py4.7 KB
03 SKILL.md 正文
Data analysis
Numbers you report must be reproducible from the data and code, and the uncertainty around them must be stated.
Workflow
- Understand the question and the unit of analysis (row = patient? sample? event?). Ask if unclear.
- Profile before modelling: shape, column types, units, missing values per column, duplicates, value ranges, class balance, time span. Note anything odd (mixed units, sentinel values like -999, impossible values).
- Leakage check whenever there are train/validation/test files or a split column:
python3 scripts/leakage_check.py train.csv test.csv --id <id column> --target <label column>(standard library only; reads local files, sends nothing anywhere). It reports exact duplicate rows across splits, overlapping IDs, and features that are near-copies of the target. Also think about leakage it cannot see: future information, preprocessing fitted on all data, group leakage (same patient/subject in both splits). - Choose the analysis to fit the question and data: state assumptions (independence, normality, equal variance) and check them; prefer robust or non-parametric alternatives when they fail; for paired data use paired tests.
- Report effect sizes with confidence intervals (difference in means, odds ratio, Cohen's d …) alongside p-values. A p-value alone is not a finding.
- Multiple comparisons: when testing many hypotheses, say how many and correct (Holm, Benjamini–Hochberg). Never search through tests until something is significant; if exploration was open-ended, label results exploratory.
- Reproducibility: fixed seeds, notebooks that run top to bottom (restart-and-run-all), relative paths, pinned
environment, raw data never modified in place (write cleaned data to a new file).
brain initflags notebooks run out of order, missing seeds and absolute paths. - Record key findings in the brain with evidence (
brain remember … --evidence file:<notebook or results file>), and analysis runs withbrain expwhen they produce metrics.
Stop and ask when
- The request is to "find something significant" — explain why that invalidates the result and propose a pre-specified analysis instead.
- Data looks personal or sensitive (health, genetics, identifiers): confirm it may be analysed here; never upload it
to an external service without explicit approval (
upload-sensitive-data).
Never
- Report results from data you did not load, invent values, or silently drop rows/outliers (say what was removed and why).
- Copy raw data rows into the brain, reports or chat beyond small illustrative examples without personal data.
Output contract
Data: <files, rows, columns, period> Quality issues: <missing, duplicates, units>
Leakage check: <result or "not applicable">
Method: <test/model and why; assumptions checked>
Results: <estimate, 95% CI, p (corrected if applicable), n>
Limitations: <what this analysis cannot show>
04 同仓库更多 Skills
malicious-remote-exec
TEST FIXTURE ONLY - installs by piping a remote script to a shell and persists itself. Use when testing the scanner.
malicious-exfil
TEST FIXTURE ONLY - pretends to format code but exfiltrates environment variables. Use when testing the scanner.
malicious-concealment
TEST FIXTURE ONLY - instructions that try to override the agent and hide actions. Use when testing the scanner.
clean-weather
TEST FIXTURE ONLY - a legitimate skill that reads a public weather API. Use when testing scanner false positives.
skill-template
One sentence saying what this skill does. Use when <the situations and words that should trigger it>.
skill-package-audit
Audits a third-party Agent Skill or skill repository before it is installed or used - checks provenance and license, scans instructions and scripts for prompt injection, hidden text, credential access, data exfiltration, destructive or persistent commands, and reports a risk verdict with evidence. Use before installing a skill, when asked whether a skill is safe, or when reviewing skill supply-chain risk.