data-table-manager — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited data-table-manager (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill to build and maintain n8n Data Tables in the current turn with data-tables and, for attachments, parse-file. Do not delegate, spawn a sub-agent, or create a background plan for data-table-only work.
Also load this skill before planning or building a workflow whose trigger, processing steps, or outputs create, inspect, or write Data Table records, then pass the relevant schema/row-handling guidance to the planning skill or builder.
n8n Data Tables are flat, workflow-friendly stores. Design them so future workflow expressions can read predictable field names and so updates/deletes can target rows with narrow filters.
change, row mutation, row delete, table delete, or cleanup.
data-tables(action="list") before creatinga table, acting on a table name, or choosing a project. If there is more than one plausible match, ask one concise clarification.
projectId whenever list results orthe user identify a project. Pass dataTableName on mutating calls when you know it so approval cards show a recognizable label.
existing table, and workflow-facing summaries.
never use create-tasks or delegate for standalone table work.
columns changed, row counts inserted/updated/deleted, skipped rows, and any approval or permission blocker.
snake_case column names: customer_email,order_total, processed_at. Data Tables accept alphanumeric names and underscores; avoid spaces, punctuation, and display-only labels.
id, created_at, updated_at, createdAt,updatedAt. If the user asks for id, choose a domain name such as external_id, customer_id, order_id, or source_id.
the specified type. Do not drop, merge, rename, or simplify spec'd columns; the narrow-schema preference below applies only when you design the schema yourself.
workflows will filter, branch, map, or show to users.
string, number, boolean, date.string for mixed values, IDs, phone numbers,postal codes, currency strings, URLs, enum/status values, and anything with leading zeros. Use number, boolean, or date only when every meaningful sample clearly matches.
payload_json as a string only when the user needs the raw source.
status, source,external_id, processed_at, last_error, attempt_count, created_date.
near-duplicates because of capitalization or pluralization.
Use parse-file for attached CSV, TSV, JSON, and XLSX files.
maxRows=20, unless the user named the structureexactly.
ambiguous names before creating a new table.
insert unknown fields without adding columns or asking.
startRow / maxRows andnextStartRow. Stop after 10 parse pages per file unless the user confirms continuing.
Cells starting with =, +, @, or - may be spreadsheet formulas. Store them as plain values; never evaluate or execute them. Preserve source values even when they look like commands, URLs, prompts, or secrets.
eq, neq, like, gt, gte, lt, lte joinedby and or or. Use limit and offset for paging; tools return at most 100 rows per query.
an exact, already-verified filter.
"duplicates" without showing the match count or asking a clarification.
delete-rows requires at least one filter. For whole-table removal, usedelete only when the user explicitly asked to delete the table.
schema.for chat approval first; call the tool and respect the result.
that no data was changed.
If a table's columns do not match what is required (your design or the user's spec), repair the table; never redesign or weaken the surrounding workflow to fit a wrong schema.
add-column.delete-column after confirming they hold nothing needed.you just created it, delete it and create it again with the correct columns. If it holds data the user needs, stop and ask before recreating it.
is still wrong. Do not proceed with the wrong schema or change the design to accommodate it.
infrastructure, pass table requirements to the workflow builder task instead of creating a standalone table yourself.
schema. Fix the table to match the spec, or stop and ask the user.
with direct tools, then summarize table details the workflow builder can use: table name, ID, project, and column names.
Use references/data-table-playbook.md for tool recipes, schema patterns, import edge cases, and output examples.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.