Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add keboola/mcp-server --skill build-sql-transformationgit clone --depth 1 https://github.com/keboola/mcp-serverWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/keboola/mcp-server/build-sql-transformation)<a href="https://agentmods.dev/skills/keboola/mcp-server/build-sql-transformation"><img src="https://agentmods.dev/badge/skills/keboola/mcp-server/build-sql-transformation/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/keboola/mcp-server/build-sql-transformation"><img src="https://agentmods.dev/badge/skills/keboola/mcp-server/build-sql-transformation.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00054 | $0.01002 |
| Opus 5.5 | $0.00022 | $0.00401 |
| Sonnet 5.5 | $0.00011 | $0.00200 |
| Haiku 4.5 | $0.00005 | $0.00100 |
Grade A, and why
build-sql-transformation scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 59 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Build a SQL transformation
Create a new SQL transformation, or update an existing one, in the one project the user confirms.
Input
What the transformation should produce, from which tables, and whether to run it once it is saved. For an existing transformation, its name or ID.
Steps
- Pick the project. Call
get_accessible_projects(withwith_llm_instruction=trueon the first call in the conversation). Show the projects and ask the user which one the transformation belongs in. Never pick a project on your own, even when only one is listed: confirm it. Do this even when the session looks scoped already or a data tool would work without it: this plugin always narrows the session to the projects the user confirms. Ifget_accessible_projectsfails because no programmatic token is present, the login is bound to one project: confirm it with the user and skip step 2. - Scope the session to that project. Call
set_project_scopewithproject_ids=[<the confirmed id>]. This must happen before any write. If the result carries a non-nullscope_token, pass it on every later tool call. Every write below also passes the confirmed id asproject_id: other conversations on the same login share the scope, and a scope they moved makes the write fail instead of landing in another project. - Get context. Call
get_project_infowithproject_id=<the confirmed id>. Note the SQL dialect (Snowflake or BigQuery). Python, R and DuckDB transformations are out of scope for this skill; say so and stop. If itstoolset_restrictionssay only read-only tools are available, tell the user they cannot save transformations in this project and stop. - Find the inputs. Use
searchwithitem_types=["table"]for the source tables, thenget_tableswithtable_ids=[...]for theirfullyQualifiedNameand columnquotedNamevalues. - Prototype the SQL. Run the
SELECTpart throughquery_datawith a smallLIMITand show the user sample rows. Fix errors here, before anything is saved. - Save it.
- New transformation: call
create_sql_transformationwithproject_id=<the confirmed id>. Reference input tables by fully qualified name; create output tables with the dialect's delimited plain name ("daily_orders"on Snowflake, a backticked name on BigQuery), never a fully qualified one, and list the names without delimiters increated_table_names=[...]. Give it a name and description that state its purpose. - Existing transformation: find it with
searchanditem_types=["transformation"], read it withget_configsandconfigs=[...]to get theblock_idandcode_idvalues, then callupdate_sql_transformationwithproject_id=<the confirmed id>,configuration_id=...,parameter_updates=[...](operations such asset_codeorstr_replace) andchange_description=.... Astorage=...value replaces all mappings: include every mapping you want to keep.
- New transformation: call
- Run it, if the user asked. Ask before running. Call
run_jobwithproject_id=<the confirmed id>and the transformation'scomponent_id=...andconfiguration_id=..., then pollget_jobswithjob_ids=[...]until the job ends. On failure, continue with thedebug-failed-jobskill. - Report. Give the transformation name, the output tables, the job result and the links the tools returned.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today First seen · 59 lines · 54 tokens per session scan A 969b92fe73e2
build-sql-transformation is a skill published in the GitHub repository keboola/mcp-server (85 stars, last pushed today), licensed MIT. It adds 54 tokens to every session and 1,002 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-23.
Other skills, from other repositories
servicenow-cmdb
Auditing the CMDB as a data model: CI class hierarchy, raw relationships, CMDB health scorecards, data quality (duplicates, orphans, staleness, missing fields) and CSDM 5 conformance. Use when the user mentions CMDB health, CMDB audit, data quality, duplicates, orphaned or stale CIs, CI classes, relationships in…
exploring-tables
Exploring any ServiceNow table: schema, field types, sample records, relationships, data patterns, a record's history (work notes, comments, field changes), and what touches a table or field (business rules, client scripts, UI policies, ACLs, script includes). Use when the user mentions tables, schemas, fields, data…
integrate
Add Mantle 0.2 to an existing application, or rebuild one on Mantle and migrate its data. Use when the application already has its own code, routes, users, storage or deployment.
db-read
Read this site's database directly when no dedicated ability answers the question — list the tables and their columns, then run one read-only SELECT. Activate when the user asks how much data a plugin stores, what is in a plugin's own table, or for a count or join the content abilities cannot express. Developer…
datagate
Every DataGate telecom billing API resource - customers, agreements, invoices, sites, products, and more - plus a local SQLite mirror and offline search. Trigger phrases: datagate invoices, datagate customer lookup, pull this month's datagate invoices, use datagate, run datagate.
api-canvas
DataCanvas primitive reference — a Tier 3 SQL/analytical workspace for tabular MCP servers, backed by DuckDB. Use when registering tables from upstream APIs, running ad-hoc SQL across them, and exporting results. Covers the acquire → register → query → export flow, per-table TTL, the token-sharing pattern for…