Agent skill · Audited from source
Data Pipeline
skill · agulli/atlas-agentsLicence not declaredAudited 18 Oct 2026 · source dd4da722e22a
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit dd4da722e22a and found no filesystem, network or shell access and no hard-coded secrets. What it does: Design, build, or debug data processing pipelines. Use when asked to process a dataset, transform data, build an ETL pipeline, schedule batch jobs, or fix data quality issues.
Cite
Cite this page
ModelsAtlas. “Data Pipeline (agulli/atlas-agents)”. Retrieved 18 Oct 2026. https://modelsatlas.com/skills/agulli/data-pipeline
2 skills are called “Data Pipeline”. You are viewing agulli/atlas-agents.
- agulli/atlas-agents★ 583✓SAFE
- revfactory/harness-100★ 1.3k✓SAFE
Trust audit
Audit 0.4.1 · source read 18 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 16,667 of 17,602 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 1 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass, no license.
Findings (1)
LOWInventory / provenanceinv.no_license
- Why
- no LICENSE file and no repo licence
- Fix
- add a licence
Audit 0.4.1 · source sha dd4da722e22a · 18 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisheragulli GitHub userOwner of the repository this skill is read from
- Source folderagulli/atlas-agents/ch09_agent_skills/skills/data-pipelineThe exact folder we audited
- LicenceNot declaredAs the repository states it
- Commit pinned for this verdictdd4da722e22aA new audit runs when the source changes
- Repository statusNot archivedLast push 93 days ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Design, build, or debug data processing pipelines. Use when asked to process a dataset, transform data, build an ETL pipeline, schedule batch jobs, or fix data quality issues.
---
name: data-pipeline
description: Design, build, or debug data processing pipelines. Use when asked to process a dataset, transform data, build an ETL pipeline, schedule batch jobs, or fix data quality issues.
license: MIT
compatibility: Requires python 3.10+
---
## Overview
Data pipelines fail silently and corrupt downstream systems. Every pipeline must be observable, idempotent, and validated at the boundary.
## Process
1. **Define the contract.** Before writing any transformation code, specify:
- **Input schema:** What fields, types, and constraints does the data arrive with?
- **Output schema:** What fields, types, and constraints must the output satisfy?
- **Volume:** How many records? Per-run? Per-day?
- **Frequency:** One-time, scheduled, or event-driven?
2. **Validate at the boundary.** The first thing any pipeline stage does is validate its input:
```python
from pydantic import BaseModel, ValidationError
class InputRecord(BaseModel):
user_id: int
event_type: str
timestamp: str # ISO 8601
value: float | None = None
def process(raw_records: list[dict]) -> list[dict]:
valid, invalid = [], []
for r in raw_records:
try:
valid.append(InputRecord(**r).model_dump())
except ValidationError as e:
invalid.append({"record": r, "error": str(e)})
if invalid:
log_invalid_records(invalid) # Never silently drop
return transform(valid)
```
3. **Make it idempotent.** Running the pipeline twice on the same input must produce the same output. Use upserts, not inserts. Use deterministic IDs based on input content, not auto-increment.
4. **Log progress at meaningful checkpoints.** After every major stage (extract, validate, transform, load), log the record count and any failures.
5. **Test with a sample.** Before running on the full dataset, run on 100 records. Confirm the output schema, record count, and that no records were silently dropped.
6. **Run on the full dataset.** Monitor progress. On completion, report: records in, records out, records failed, and time elapsed.
## Rationalizations
| Excuse | Rebuttal |
|--------|----------|
| "I'll add validation later" | Invalid data corrupts your database. Validate at the boundary now. |
| "Logging slows the pipeline down" | A pipeline that fails without logs requires a full rerun to debug. Log it. |
| "It worked on the sample" | Test samples are not representative. Always run a full-dataset dry run before writing to the destination. |
## Verification
- [ ] Input and output schemas are defined before any code is written
- [ ] Invalid records are logged, not silently dropped
- [ ] Pipeline was tested on a 100-record sample before full run
- [ ] Final report includes: records in, records out, records failedExcerpt, first 2,852 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit dd4da72
git clone https://github.com/agulli/atlas-agents git -C atlas-agents checkout dd4da722e22a
The author documents no install command, so this uses the repository directly. Our verdict covers commit dd4da722e22a only.
Works in
The author has not said which agents this skill supports, and we have not tested it in any.
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
dd4da722e22a
Similar skills
All data & analysis skills →obra/superpowers
Use when creating new skills, editing existing skills, or verifying skills work before deployment
mattpocock/skills
A relentless interview to sharpen a plan or design, which also creates docs (ADR's and glossary) as we go.
mattpocock/skills
Grill the user relentlessly about a plan, decision, or idea. Use when the user wants to stress-test their thinking, or uses any 'grill' trigger phrases.
Questions about Data Pipeline
Is Data Pipeline safe to install?
What can Data Pipeline access on my machine?
How current is this page?
Sources
- github.com/agulli/atlas-agents/tree/main/ch09_agent_skills/skill — the audited source at commit dd4da722e22a and every finding aboveObserved · 18 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- Is Data Pipeline safe to install?
- What can Data Pipeline access on my machine?
- How current is this page?