Agent skill · Audited from source
bigdata-skill
skill · daymade/claude-code-skillsMIT licenceAudited 23 Oct 2026 · source 98ff99c482a4
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 98ff99c482a4 and observed network access and no hard-coded secrets. What it does: Pulls Bigdata.com (RavenPack) financial and news data via the official bigdata-client SDK and /v1/* REST endpoints — structured financials, prices, analyst estimates, entity-sentiment series, annotated chunk search,…
Cite
Cite this page
ModelsAtlas. “bigdata-skill (daymade/claude-code-skills)”. Retrieved 23 Oct 2026. https://modelsatlas.com/skills/daymade/bigdata-skill
Trust audit
Audit 0.4.1 · source read 23 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkDeclared3 observations
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 1 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | PASS | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (1)
LOWInventory / provenanceinv.symlink · AGENTS.md
AGENTS.md
- Why
- link not followed
- Fix
- —
Audit 0.4.1 · source sha 98ff99c482a4 · 23 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherdaymade GitHub userOwner of the repository this skill is read from
- Source folderdaymade/claude-code-skills/daymade-financial/bigdata-skillThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdict98ff99c482a4A new audit runs when the source changes
- Repository statusNot archivedPushed today
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Pulls Bigdata.com (RavenPack) financial and news data via the official bigdata-client SDK and /v1/* REST endpoints — structured financials, prices, analyst estimates, entity-sentiment series, annotated chunk search,…
---
name: bigdata-skill
disable-model-invocation: true
description: >-
Pulls Bigdata.com (RavenPack) financial and news data via the official bigdata-client SDK and
/v1/* REST endpoints — structured financials, prices, analyst estimates, entity-sentiment series,
annotated chunk search, screener. Use when the Bigdata MCP's tearsheets/search feel thin and you
need the machine-readable substrate: mentions of Bigdata.com, RavenPack, a bd_v2_ key,
rp_entity_id, or chunk/query_unit cost.
---
# Bigdata.com SDK + REST Toolkit
Get the structured substrate the Bigdata.com MCP server doesn't hand over. The
MCP returns clean prose and pre-synthesized tearsheets, but its search tool
gives chunks with no per-chunk sentiment or entity spans, and its tearsheets
give aggregate values — not the fiscal-period time series, universe screener, or
per-field JSON you'd build a pipeline on. The official `bigdata-client` SDK plus
a thin REST passthrough over the *same backend, same JWT* reach the official
`/v1/*` endpoints that hold it. This skill bundles a toolkit that does exactly
that — already debugged, already cost-guarded — so you don't re-pay the
discovery cost.
## The core problem this solves (read this first)
The Bigdata MCP server answers "what's the sentiment around NVIDIA?" with a
readable paragraph or a pre-synthesized tearsheet — genuinely useful for a chat
turn. But the moment you need the **machine-readable substrate** to build a
pipeline on, the MCP doesn't hand it over:
- its **search** tool returns chunks with text + relevance only — **no per-chunk
sentiment number, no entity character spans**;
- its **tearsheets** give aggregate values (a single sentiment score, a summary
of estimates) — **not** a fiscal-period time series you can compute on, a
universe screener, or per-field JSON.
The fix is a general pattern, not a Bigdata trick:
> **When an MCP data source returns only synthesized output but you need the
> structured fields underneath, drop to the vendor SDK or REST.** MCP optimizes
> for a chat turn, not a pipeline.
Crucially, for Bigdata these structured fields are **official, publicly
documented REST endpoints** (`docs.bigdata.com/api-reference/...`), not a hidden
backend — and Bigdata is **sunsetting the SDK (EOL 2026-12-31) in favour of this
REST API**, so the REST layer here is the forward-compatible path, not a hack.
The SDK (`bigdata_client.Bigdata`) covers search + knowledge-graph; **`bd._api.http`**
reaches every `/v1/*` endpoint the SDK never wrapped. The bundled
`bigdata_toolkit` packages both behind one `BigdataClient`.
## When to use this skill
Trigger on any of these, in any language:
- The user is using **Bigdata.com / RavenPack** and the MCP result feels thin —
"where's the sentiment score?", "I need entity-level data", "the calendar".
- They want **forward / structured** financials for a ticker: analyst
estimates, earnings or event calendar, earnings surprise, analyst ratings,
price targets, a company screener / universe.
- They want **annotated news chunks** with numeric sentiment + entity spans, or
a sentiment time series / co-mention graph.
- They mention a **`bd_v2_` API key**, `rp_entity_id`, `query_unit` / chunk
cost, `bigdata-client`, or "the bigdata MCP isn't enough".
- They're building an **investment-research dataset** and need a reusable,
cost-aware data-pull layer rather than one-off MCP calls.
## Setup (one time)
**1 — API key (never hardcode it).** The client fail-fasts if it's missing:
```bash
export BIGDATA_API_KEY=bd_v2_xxxxxxxx
```
**2 — An isolated Python env with the official SDK.** The bundled toolkit
imports `bigdata_client`; install it once:
```bash
uv venv .venv --python 3.12
uv pip install --python .venv/bin/python bigdata-client
# Behind a slow/blocked PyPI (e.g. mainland China) add a mirror, and unset any
# outbound proxy for the install step so uv reaches the index directly:
# --index-url https://pypi.tuna.tsinghua.edu.cn/simple
```
**3 — Outbound proxy (only if your network needs one to reach
`api.bigdata.com`).** Two equivalent options — the official SDK accepts both: an
env var, or `BigdataClient(proxy=...)` in code. The env var is simplest:
```bash
export HTTPS_PROXY=http://<host>:<port> # plus WSS_PROXY for chat/WebSocket
```
If a proxy does TLS interception (self-signed CA) and you hit SSL handshake
errors, the official fix is `BigdataClient(verify_ssl="<proxy-CA>.pem")` — not
blind retries.
**4 — Make the bundled package importable** by putting this skill's `scripts/`
on `PYTHONPATH` (or `sys.path.insert(0, "<this-skill>/scripts")`).
**Smoke-test the whole path** (entity resolve + quota are free; `--with-search`
adds one ~1 query_unit chunk search):
```bash
BIGDATA_API_KEY=bd_v2_xxx PYTHONPATH=scripts .venv/bin/python scripts/probe_example.py
```
## Quickstart
```python
import sys
sys.path.insert(0, "<this-skill>/scripts") # so `import bigdata_toolkit` resolves
from bigdata_toolkit import (
BigdataClient, EntityResolver, AnnotatedSearcher,
StructuredDataREST, CostTracker, CostModel, rc, # rc = SSL-retry wrapper
)
c = BigdataClient() # SDK + REST escape hatch, one object
er = EntityResolver(c)
nvda = rc(lambda: er.resolve_id("NVIDIA", country="US")) # -> 'E09E2B' (rp_entity_id is the gateway key)
# --- Structured financials the MCP does NOT expose (REST escape hatch) ---
rest = StructuredDataREST(c)
est = rc(lambda: rest.analyst_estimates(nvda, period="quarter", limit=5)) # forward consensus
surp = rc(lambda: rest.latest_surprise(nvda)) # last EPS/revenue surprise
cal = rc(lambda: rest.events_calendar(nvda, categories=["earnings-call"],
start_date="2026-06-01", end_date="2026-12-31"))
# --- Annotated chunks the MCP STRIPS: sentiment + entity spans (cost-guarded) ---
s = AnnotatedSearcher(c)
docs = rc(lambda: s.search_entity(nvda, keyword="data center"Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 98ff99c
uv venv .venv --python 3.12 uv pip install --python .venv/bin/python bigdata-client
git clone https://github.com/daymade/claude-code-skills git -C claude-code-skills checkout 98ff99c482a4
Commands as the repository documents them: shown, never run by us. Our verdict covers commit 98ff99c482a4 only.
Works in which agents?
What its own text says, not a test
| Agent | Status | More |
|---|---|---|
| Cursor | Mentioned in its text, not tested | Skills for Cursor · About Cursor |
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
98ff99c482a4
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/daymade/bigdata-skill/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
obra/superpowers
Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands and confirming output before making any success claims; evidence before assertions…
obra/superpowers
Use when you have a spec or requirements for a multi-step task, before touching code
obra/superpowers
Use when starting any conversation - establishes how to find and use skills, requiring skill invocation before ANY response including clarifying questions
Add this badge to your README
[](https://modelsatlas.com/skills/daymade/bigdata-skill/)
<a href="https://modelsatlas.com/skills/daymade/bigdata-skill/"><img src="https://modelsatlas.com/skills/daymade/bigdata-skill/badge.svg" alt="ModelsAtlas: SAFE B"></a>
Questions about bigdata-skill
What does the bigdata-skill skill do?
Is bigdata-skill safe to install?
What can bigdata-skill access on my machine?
Which assistants does bigdata-skill work with?
How current is this page?
Sources
- github.com/daymade/claude-code-skills/tree/main/daymade-financia — the audited source at commit 98ff99c482a4 and every finding aboveObserved · 23 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the bigdata-skill skill do?
- Is bigdata-skill safe to install?
- What can bigdata-skill access on my machine?