{"slug":"osquery-osquery","name":"Osquery","description":"SQL powered operating system instrumentation, monitoring, and analytics.","tagline":"SQL powered operating system instrumentation, monitoring, and analytics.","category":"data-analysis","tags":["sql","data-analysis","data","hacktoberfest","intrusion-detection","monitoring","security","c++","github"],"author":{"name":"osquery","verified":true,"url":"https://github.com/osquery"},"attribution":{"status":"community_indexed","statusLabel":"Community indexed","shortLabel":"COMMUNITY INDEXED","sourceLabel":"GitHub star discovery","sourceDetail":"osquery/osquery","creatorName":"osquery","creatorUrl":"https://github.com/osquery","sourceUrl":"https://github.com/osquery/osquery","indexedBy":"OpenAgentSkill community index","claimUrl":"https://www.openagentskill.com/skills/osquery-osquery#claim-this-skill","claimCta":"Claim this skill","trustNote":"This listing was indexed from public sources and is not marked official until a maintainer claim is approved.","publicNote":"Attribution links to the public repository or creator profile. Creators can claim the listing to update ownership signals."},"stats":{"stars":23329,"forks":2577,"downloads":0,"rating":0,"review_count":0,"quality_score":73.78},"quality":{"score":100,"tier":"excellent","label":"Excellent","summary":"High-confidence pick with strong adoption and healthy maintenance signals.","signals":[{"label":"GitHub stars","value":"23K","tone":"positive"},{"label":"Freshness","value":"3d ago","tone":"positive"},{"label":"Install ready","value":"Yes","tone":"positive"},{"label":"License","value":"Unknown","tone":"neutral"}],"warnings":[]},"trust":{"version":"trust-score-v4","score":88,"tier":"production","label":"Production candidate","summary":"Strong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/runtime risk, install safety, permission surface, and install availability.","recommendedAction":"Shortlist for production use, then run a normal repository and dependency review.","dimensions":[{"id":"github_adoption","label":"GitHub adoption","score":100,"weight":0.13,"status":"pass","detail":"23K GitHub stars"},{"id":"repo_activity","label":"Stars/forks activity","score":97,"weight":0.08,"status":"pass","detail":"23K stars, 2.6K forks; issue activity unavailable in current metadata"},{"id":"maintenance","label":"Recent maintenance","score":100,"weight":0.14,"status":"pass","detail":"3d since push"},{"id":"license","label":"License clarity","score":42,"weight":0.09,"status":"warn","detail":"Unknown"},{"id":"documentation","label":"README/SKILL.md completeness","score":74,"weight":0.14,"status":"info","detail":"Public metadata needs stronger README/SKILL.md context"},{"id":"dependency_risk","label":"Dependency/runtime risk","score":82,"weight":0.12,"status":"pass","detail":"database surface"},{"id":"installability","label":"Install availability","score":92,"weight":0.1,"status":"pass","detail":"npx skills add osquery/osquery"},{"id":"install_safety","label":"Install command safety","score":92,"weight":0.1,"status":"pass","detail":"standard package or runtime install path"},{"id":"permission_surface","label":"Permission surface","score":74,"weight":0.07,"status":"info","detail":"filesystem or document access, database access"},{"id":"repository","label":"Repository evidence","score":86,"weight":0.04,"status":"pass","detail":"https://github.com/osquery/osquery"},{"id":"review_status","label":"Review status","score":88,"weight":0.05,"status":"pass","detail":"AI review data available"},{"id":"agent_outcomes","label":"Real agent outcomes","score":58,"weight":0.08,"status":"info","detail":"No agent outcome data yet"}],"checks":[{"status":"pass","label":"GitHub adoption","detail":"23K GitHub stars"},{"status":"pass","label":"Stars/forks activity","detail":"23K stars, 2.6K forks; issue activity unavailable in current metadata"},{"status":"pass","label":"Recent maintenance","detail":"3d since push"},{"status":"warn","label":"License clarity","detail":"Unknown"},{"status":"info","label":"README/SKILL.md completeness","detail":"Public metadata needs stronger README/SKILL.md context"},{"status":"pass","label":"Dependency/runtime risk","detail":"database surface"},{"status":"pass","label":"Install availability","detail":"npx skills add osquery/osquery"},{"status":"pass","label":"Install command safety","detail":"standard package or runtime install path"},{"status":"info","label":"Permission surface","detail":"filesystem or document access, database access"},{"status":"pass","label":"Repository evidence","detail":"https://github.com/osquery/osquery"},{"status":"pass","label":"Review status","detail":"AI review data available"},{"status":"info","label":"Real agent outcomes","detail":"No agent outcome data yet"},{"status":"pass","label":"Ownership","detail":"Listing manually verified"},{"status":"info","label":"OpenAgentSkill usage","detail":"No local usage activity yet"},{"status":"info","label":"Agent outcomes","detail":"No agent outcome data yet"}],"strengths":["Manually verified listing","AI review approved","Install path is available","Repository evidence is available","Recently maintained repository","Large GitHub adoption signal","Install command has no obvious high-risk pattern"],"warnings":["License is unclear","License clarity: Unknown"],"evidence":{"stars":"23K GitHub stars","repoActivity":"23K stars, 2.6K forks","lastPushed":"3d since push","license":"Unknown","repository":"https://github.com/osquery/osquery","install":"npx skills add osquery/osquery","installSafety":"standard package or runtime install path","permissionSurface":"filesystem or document access, database access","documentation":"Usable metadata, review docs","agentOutcomes":"No agent outcome data yet"},"installReadiness":{"ready":true,"command":"npx skills add osquery/osquery","policy":"human_review_before_install","label":"Human review before install","notes":["Install path is available","Repository evidence is available","License is unclear","3d since push"]},"agentCompatibility":["C++","SQL","Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"riskSummary":{"level":"medium","label":"Review before production","notes":["License is unclear","License clarity: Unknown"]},"outcomeEvidence":{"total":0,"successes":0,"successRate":null,"installAttempts":0,"riskBlocked":0,"setupRequired":0,"lastOutcomeAt":null,"label":"No agent outcome data yet"},"autoInstall":{"allowed":false,"sandboxRequired":true,"policy":"human_review_before_install","reason":"Human review or sandbox validation is required before automatic installation."},"bestFor":["data-analysis","sql","data","hacktoberfest","intrusion-detection","monitoring"],"doNotUseFor":["Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace","Commercial reuse before clarifying license terms"],"knownRisks":["License is unclear","License clarity: Unknown"]},"safety":{"score":72,"level":"review_before_install","label":"Review before install","safety_tier":{"tier":"reviewed","label":"Reviewed","badge":"REVIEWED","summary":"Good audit and safety signals with no high-risk permission hints in public metadata.","recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","auto_install_policy":"review","reasons":["Safe-to-try audit","72/100 agent safety score"]},"auto_install_allowed":false,"human_review_required":true,"blocked":false,"audit_risk":"safe_to_try","permission_hints":[{"id":"network","label":"Network access","reason":"Skill likely fetches remote pages, APIs, repositories, or external services.","severity":"medium"},{"id":"filesystem","label":"Filesystem access","reason":"Skill may read or write project files, documents, generated artifacts, or local workspace state.","severity":"medium"},{"id":"database","label":"Database access","reason":"Skill may inspect schemas, query databases, or work with persistent stores.","severity":"medium"}],"policy_warnings":["License is unclear"],"constraints_applied":{"max_risk":"medium","needs_install_command":true,"min_stars":0}},"safety_gate":{"tier":"reviewed","label":"Reviewed","badge":"REVIEWED","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","reasons":["Safe-to-try audit","72/100 agent safety score"]},"supply_profile":{"track":{"slug":"data","label":"Data, BI, and analytics","shortLabel":"Data","description":"CSV, SQL, notebooks, dashboards, data pipelines, BI, ETL, and spreadsheet analysis."},"scenario":{"label":"Database and SQL","description":"I need my agent to inspect database schemas, write SQL, and explain query results.","useCases":[{"slug":"database-sql","title":"Database and SQL"},{"slug":"coding-agents","title":"Coding agents"},{"slug":"rag-knowledge","title":"RAG and knowledge"}]},"applicableAgents":["Claude Code","CLI","Codex","Cursor","C++"],"install":{"ready":true,"command":"npx skills add osquery/osquery","primaryTarget":"CLI","targetCount":4},"githubQuality":{"stars":23329,"starsLabel":"23K","forks":2577,"license":"Unknown","qualityScore":100,"trustScore":88,"auditScore":92},"maintenance":{"status":"fresh","label":"3d since push","daysSincePush":3,"lastPushedAt":"2026-06-19T05:36:20+00:00"},"risk":{"level":"safe_to_try","label":"Safe to try","requiresReview":true,"notes":["License is unclear","License clarity: Unknown"]},"coverageTags":["Data","Database and SQL","data-analysis","sql","hacktoberfest","intrusion-detection","monitoring","security"]},"audit":{"audit_score":92,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["License is unclear","License clarity: Unknown"]},"decision":{"readiness_score":100,"readiness_label":"Production-ready","headline":"Primary pick for Database and SQL","role":"Primary pick","primary_fit":"Database and SQL","best_for":["Database and SQL workflows","Claude Code teams","teams that value GitHub adoption signals"],"risks":["No OpenAgentSkill engagement data yet"],"next_steps":["Install it in a sandbox agent and run one Database and SQL task end to end.","Compare output quality, latency, and failure behavior against at least one alternative.","Promote it into production only after reviewing repository permissions, license, and maintenance signals."]},"agent_readable_metadata":{"version":"openagentskill-agent-metadata-v2","skill":{"slug":"osquery-osquery","name":"Osquery","description":"SQL powered operating system instrumentation, monitoring, and analytics.","category":"data-analysis","url":"https://www.openagentskill.com/skills/osquery-osquery","repository":"https://github.com/osquery/osquery","github_repo":"osquery/osquery"},"suited_tasks":["Database and SQL workflows","Claude Code teams","teams that value GitHub adoption signals","Understand table relationships","Write safer queries","Explain database changes","Inspect source files","Explain architecture"],"suited_agents":["C++","SQL","Codex","Claude Code","Cursor","OpenAgentSkill CLI","CLI"],"install":{"command":"npx skills add osquery/osquery","ready":true,"targets":[{"id":"openagentskill-cli","label":"CLI","kind":"command","value":"npx skills add osquery/osquery"},{"id":"codex","label":"Codex","kind":"agent-prompt","value":"Install the \"Osquery\" agent skill from https://github.com/osquery/osquery. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: SQL powered operating system instrumentation, monitoring, and analytics."},{"id":"claude-code","label":"Claude Code","kind":"agent-prompt","value":"Add \"Osquery\" as a Claude Code skill from https://github.com/osquery/osquery. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: SQL powered operating system instrumentation, monitoring, and analytics."},{"id":"cursor","label":"Cursor","kind":"agent-prompt","value":"Turn \"Osquery\" from https://github.com/osquery/osquery into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: SQL powered operating system instrumentation, monitoring, and analytics."}],"handoff_url":"https://www.openagentskill.com/api/skills/osquery-osquery/install","manifest_url":"https://www.openagentskill.com/api/registry/manifest/osquery-osquery"},"trust":{"score":88,"label":"Production candidate","version":"trust-score-v4","install_policy":"human_review_before_install","evidence":{"stars":"23K GitHub stars","repoActivity":"23K stars, 2.6K forks","lastPushed":"3d since push","license":"Unknown","repository":"https://github.com/osquery/osquery","install":"npx skills add osquery/osquery","installSafety":"standard package or runtime install path","permissionSurface":"filesystem or document access, database access","documentation":"Usable metadata, review docs","agentOutcomes":"No agent outcome data yet"},"outcome_evidence":{"total":0,"success_rate":null,"install_attempts":0,"risk_blocked":0,"setup_required":0,"label":"No agent outcome data yet"},"auto_install":{"allowed":false,"sandbox_required":true,"reason":"Human review or sandbox validation is required before automatic installation."},"best_for":["data-analysis","sql","data","hacktoberfest","intrusion-detection","monitoring"],"known_risks":["License is unclear","License clarity: Unknown"]},"audit":{"score":92,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["License is unclear","License clarity: Unknown"]},"safety_gate":{"tier":"reviewed","label":"Reviewed","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow."},"quality":{"score":100,"label":"Excellent"},"supply":{"track":"Data, BI, and analytics","scenario":"Database and SQL","maintenance":"3d since push","risk":"Safe to try"},"alternative_skills":[],"do_not_use_when":["teams that need a vendor-supported SLA","high-compliance environments without internal security review","No OpenAgentSkill engagement data yet","License is unclear","License clarity: Unknown","Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace"],"agent_contract":{"task_input":"Use Osquery in an agent workflow","recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","install_policy":"review","minimum_review_before_use":["Trust: 88/100 Production candidate","Audit: 92/100 Safe to try","Safety: 72/100 Review before install","Review repository, license, install command, and permission surface before production use."],"expected_agent_output":{"selected_skill":"osquery-osquery (Osquery)","install_command":"npx skills add osquery/osquery","risk_summary":"Safe to try; Reviewed; Review before production","verification_result":"Report the smallest successful task, files touched, warnings, and any missing setup."}},"endpoints":{"web":"https://www.openagentskill.com/skills/osquery-osquery","api":"https://www.openagentskill.com/api/agent/skills/osquery-osquery","audit":"https://www.openagentskill.com/skills/osquery-osquery/audit","eval":"https://www.openagentskill.com/api/agent/evals?slug=osquery-osquery&task=Use%20Osquery%20in%20an%20agent%20workflow&max_risk=medium","resolve":"https://www.openagentskill.com/api/agent/resolve?task=Use%20Osquery%20in%20an%20agent%20workflow&agent=codex&max_risk=medium","install":"https://www.openagentskill.com/api/skills/osquery-osquery/install","manifest":"https://www.openagentskill.com/api/registry/manifest/osquery-osquery"}},"machine_metadata":{"version":"openagentskill-agent-metadata-v2","skill":{"slug":"osquery-osquery","name":"Osquery","description":"SQL powered operating system instrumentation, monitoring, and analytics.","category":"data-analysis","url":"https://www.openagentskill.com/skills/osquery-osquery","repository":"https://github.com/osquery/osquery","github_repo":"osquery/osquery"},"suited_tasks":["Database and SQL workflows","Claude Code teams","teams that value GitHub adoption signals","Understand table relationships","Write safer queries","Explain database changes","Inspect source files","Explain architecture"],"suited_agents":["C++","SQL","Codex","Claude Code","Cursor","OpenAgentSkill CLI","CLI"],"install":{"command":"npx skills add osquery/osquery","ready":true,"targets":[{"id":"openagentskill-cli","label":"CLI","kind":"command","value":"npx skills add osquery/osquery"},{"id":"codex","label":"Codex","kind":"agent-prompt","value":"Install the \"Osquery\" agent skill from https://github.com/osquery/osquery. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: SQL powered operating system instrumentation, monitoring, and analytics."},{"id":"claude-code","label":"Claude Code","kind":"agent-prompt","value":"Add \"Osquery\" as a Claude Code skill from https://github.com/osquery/osquery. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: SQL powered operating system instrumentation, monitoring, and analytics."},{"id":"cursor","label":"Cursor","kind":"agent-prompt","value":"Turn \"Osquery\" from https://github.com/osquery/osquery into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: SQL powered operating system instrumentation, monitoring, and analytics."}],"handoff_url":"https://www.openagentskill.com/api/skills/osquery-osquery/install","manifest_url":"https://www.openagentskill.com/api/registry/manifest/osquery-osquery"},"trust":{"score":88,"label":"Production candidate","version":"trust-score-v4","install_policy":"human_review_before_install","evidence":{"stars":"23K GitHub stars","repoActivity":"23K stars, 2.6K forks","lastPushed":"3d since push","license":"Unknown","repository":"https://github.com/osquery/osquery","install":"npx skills add osquery/osquery","installSafety":"standard package or runtime install path","permissionSurface":"filesystem or document access, database access","documentation":"Usable metadata, review docs","agentOutcomes":"No agent outcome data yet"},"outcome_evidence":{"total":0,"success_rate":null,"install_attempts":0,"risk_blocked":0,"setup_required":0,"label":"No agent outcome data yet"},"auto_install":{"allowed":false,"sandbox_required":true,"reason":"Human review or sandbox validation is required before automatic installation."},"best_for":["data-analysis","sql","data","hacktoberfest","intrusion-detection","monitoring"],"known_risks":["License is unclear","License clarity: Unknown"]},"audit":{"score":92,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["License is unclear","License clarity: Unknown"]},"safety_gate":{"tier":"reviewed","label":"Reviewed","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow."},"quality":{"score":100,"label":"Excellent"},"supply":{"track":"Data, BI, and analytics","scenario":"Database and SQL","maintenance":"3d since push","risk":"Safe to try"},"alternative_skills":[],"do_not_use_when":["teams that need a vendor-supported SLA","high-compliance environments without internal security review","No OpenAgentSkill engagement data yet","License is unclear","License clarity: Unknown","Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace"],"agent_contract":{"task_input":"Use Osquery in an agent workflow","recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","install_policy":"review","minimum_review_before_use":["Trust: 88/100 Production candidate","Audit: 92/100 Safe to try","Safety: 72/100 Review before install","Review repository, license, install command, and permission surface before production use."],"expected_agent_output":{"selected_skill":"osquery-osquery (Osquery)","install_command":"npx skills add osquery/osquery","risk_summary":"Safe to try; Reviewed; Review before production","verification_result":"Report the smallest successful task, files touched, warnings, and any missing setup."}},"endpoints":{"web":"https://www.openagentskill.com/skills/osquery-osquery","api":"https://www.openagentskill.com/api/agent/skills/osquery-osquery","audit":"https://www.openagentskill.com/skills/osquery-osquery/audit","eval":"https://www.openagentskill.com/api/agent/evals?slug=osquery-osquery&task=Use%20Osquery%20in%20an%20agent%20workflow&max_risk=medium","resolve":"https://www.openagentskill.com/api/agent/resolve?task=Use%20Osquery%20in%20an%20agent%20workflow&agent=codex&max_risk=medium","install":"https://www.openagentskill.com/api/skills/osquery-osquery/install","manifest":"https://www.openagentskill.com/api/registry/manifest/osquery-osquery"}},"platforms":["C++","SQL","Claude Code"],"use_cases":[{"slug":"database-sql","title":"Database and SQL","url":"https://www.openagentskill.com/use-cases/database-sql"},{"slug":"coding-agents","title":"Coding agents","url":"https://www.openagentskill.com/use-cases/coding-agents"},{"slug":"rag-knowledge","title":"RAG and knowledge","url":"https://www.openagentskill.com/use-cases/rag-knowledge"},{"slug":"workflow-automation","title":"Workflow automation","url":"https://www.openagentskill.com/use-cases/workflow-automation"}],"install":"npx skills add osquery/osquery","install_targets":[{"id":"openagentskill-cli","label":"CLI","title":"OpenAgentSkill CLI","kind":"command","value":"npx skills add osquery/osquery","description":"Use the registry command when your workflow supports the OpenAgentSkill installer.","copyLabel":"Copy command"},{"id":"codex","label":"Codex","title":"Codex install prompt","kind":"agent-prompt","value":"Install the \"Osquery\" agent skill from https://github.com/osquery/osquery. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: SQL powered operating system instrumentation, monitoring, and analytics.","description":"Give Codex a repo-aware install prompt when the skill is not available through a local CLI.","copyLabel":"Copy prompt"},{"id":"claude-code","label":"Claude Code","title":"Claude Code skill prompt","kind":"agent-prompt","value":"Add \"Osquery\" as a Claude Code skill from https://github.com/osquery/osquery. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: SQL powered operating system instrumentation, monitoring, and analytics.","description":"Use this prompt to ask Claude Code to add the skill and explain the local activation steps.","copyLabel":"Copy prompt"},{"id":"cursor","label":"Cursor","title":"Cursor rule prompt","kind":"agent-prompt","value":"Turn \"Osquery\" from https://github.com/osquery/osquery into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: SQL powered operating system instrumentation, monitoring, and analytics.","description":"Use this when installing as Cursor project rules or reusable agent instructions.","copyLabel":"Copy prompt"}],"repository":"https://github.com/osquery/osquery","github_repo":"osquery/osquery","version":"1.0.0","license":"Unknown","updated_at":"2026-06-21T00:11:06.364684+00:00","canonical_key":"osquery/osquery","recommendation_reasons":["Strong GitHub adoption: 23,329 stars","Quality score 74/100","Install handoff is available","Repository freshness signal is available"],"urls":{"web":"https://www.openagentskill.com/skills/osquery-osquery","api":"https://www.openagentskill.com/api/agent/skills/osquery-osquery","install_api":"https://www.openagentskill.com/api/skills/osquery-osquery/install","audit":"https://www.openagentskill.com/skills/osquery-osquery/audit","repository":"https://github.com/osquery/osquery"},"meta":{"endpoint":"/api/registry/manifest/{slug}","canonical_agent_endpoint":"/api/agent/skills/osquery-osquery","agent_friendly":true,"api_version":"1.0","generated_at":"2026-06-22T23:17:00.839Z"}}