WrenSAFE
GenBI (Generative BI) for AI agents, an open-source, governed text-to-SQL through an open context layer that turns natural-language questions into trusted dashboards, charts, and SQL across 20+ data sources, such as BigQuery, Snowflake, PostgreSQL, ClickHouse, Amazon Redshift, Databricks and more.
Overview
GenBI (Generative BI) for AI agents, an open-source, governed text-to-SQL through an open context layer that turns natural-language questions into trusted dashboards, charts, and SQL across 20+ data sources, such as BigQuery, Snowflake, PostgreSQL, ClickHouse, Amazon Redshift, Databricks and more.
f609abda4ab4OBSERVED · 2026-10-20What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
--- name: wren description: "Wren CLI for AI agents — a semantic SQL layer over 22+ databases (Postgres, MySQL, BigQuery, Snowflake, Spark, ...). The actual workflow guides live inside the `wren` CLI itself; this is just a discovery stub. Use whenever the user asks a data question (how many, show me, top N, compare, trend, breakdown, metric, revenue, customers, orders), wants to install / set up Wren Engine, connect a new database, connect SaaS data via dlt (HubSpot, Stripe, Salesforce, GitHub, Slack), generate or regenerate an MDL project from a database schema, enrich a project with business context (enum meanings, units, cubes like ARR / DAU / churn), or turn a project's context layer into a shareable GenBI web app / dashboard and deploy it to Vercel or Cloudflare. Triggers: 'install wren', 'set up wren engine', 'connect database to wren', 'connect SaaS to wren', 'load hubspot / stripe / salesforce data', 'generate mdl', 'scaffold wren project', 'enrich wren context', 'augment my project', 'add cubes', 'build a dashboard', 'make a shareable analytics app', 'deploy my context layer as a web app', 'genbi app', 'wren onboarding', 'wren usage', 'wren generate mdl', 'wren dlt connector', 'wren enrich context', 'wren genbi'." license: Apache-2.0 allowed-tools: Bash(wren:*) --- # Wren CLI This is a discovery stub. The actual workflow guides and prompt helpers live inside the `wren` CLI itself, so they always match the installed wrenai version (no skill cache, no version drift). Install: `pip install wrenai`. ## Workflow guides ```bash wren skills list # all available workflow guides wren skills get onboarding # set up Wren end-to-end wren skills get usage # day-to-day querying wren skills get generate-mdl # generate MDL from a database schema wren skills get dlt-connector # connect SaaS sources via dlt wren skills get enrich-context # add business context (units, enums, cubes) wren skills get genbi # build & deploy a shareable GenBI web app # add --full to include the skill's reference docs # add --script <name> to fetch a bundled script (e.g. dlt-connector / introspect_dlt) ``` ## Reference docs Full reference docs live on the web: <https://github.com/Canner/WrenAI/tree/main/docs/core> ```bash wren docs connection-info <ds> # required + optional connection fields for a data source ``` ## Prompt enhancement (wraps a user question for an agent) ```bash wren ask "<question>" --guided # for weaker LLMs (strict task flow) wren ask "<question>" --direct # for stronger LLMs (minimal wrapping) ``` ## Day-to-day data commands (not a sub-app — top-level) ```bash wren --sql '...' # execute SQL through the MDL layer wren query --sql '...' # same, explicit wren dry-plan --sql '...' # transpile only, no DB hit wren context show / build / validate # project / MDL lifecycle wren profile add / list / switch # named connection profiles wren memory index / recall / store # semantic memory (needs `[memory]` extra) ``` Run `wren --help` for the full surface; load the matching `wren skills get <name>` guide before driving any multi-step workflow.
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (0)
No findings outside the package's declared scope.
Gates applied: no_behavioural_pass.
f609abda4ab4full audit observations/trust-audit/skill/canner__wren.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-20 | f609abda4ab4 | SAFE | B | 89 | first audit |
Questions
What does the wren — canner/wrenai skill do?
GenBI (Generative BI) for AI agents, an open-source, governed text-to-SQL through an open context layer that turns natural-language questions into trusted dashboards, charts, and SQL across 20+ data sources, such as BigQuery, Snowflake, PostgreSQL, ClickHouse, Amazon Redshift, Databricks and more.
Is wren — canner/wrenai safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can wren — canner/wrenai access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (f609abda4ab4), read on 2026-10-20. The repository is watched, and a new audit runs when it changes — this is the first audit.
Add this badge to your README
Shows this page's audit result and links back to it. It updates when the audit does.
[](https://modelsatlas.com/skills/canner/wren/)
Not your listing, or something out of date? Claim or update your listing.