All skills & plugins / Codex official plugins

Data Analytics

Answer product and business questions with data

Type: Plugin with 18 skills by Data Analytics Maintainers
Catalog: Codex official plugins
Source: openai/plugins/plugins/data-analytics (201 files scanned)
Install and details: Agent Skills Index entry
License: Proprietary (manifest)
Signals: Local MCP serverBundled scriptsNetwork calls in codeSpawns processes

Pre-approved tools

No allowed-tools or tools list in its SKILL.md, command or agent files, so the agent asks before using tools as usual.

Hooks

No hooks.

MCP servers and apps

Server	Where it runs	Credentials
dataAnalyticsWidgets data-analytics/.mcp.json	Local process: `node ./mcp/server.cjs --stdio`	none in config

Also ships 1 Codex app connector file (.app.json), which link a hosted app to your account.

Bundled code

79 code files (JavaScript, Python, TypeScript); first 40 listed:

Network calls

3 files with a network call pattern. First match per file:

plugins/data-analytics/src/analytics-app/runtimeEnvironment.ts:23

const response = await fetch(path, { cache: "no-store", ...init });

plugins/data-analytics/tests/sites-export.test.mjs:297

const response = await worker.default.fetch(new Request(`https://sites.test${route}`));

plugins/data-analytics/mcp/server.cjs:2618
```
async fetch(request, env = {}) {
```

Starts other programs

15 files. First match per file:

plugins/data-analytics/src/datascience-chart-widget.js:744
```
while ((match = pattern.exec(sql))) {
```
plugins/data-analytics/tests/portable-release-package.smoke.mjs:2
```
import { spawnSync } from "node:child_process";
```
plugins/data-analytics/tests/portable-artifact-builder.test.mjs:2
```
import { execFileSync } from "node:child_process";
```
plugins/data-analytics/tests/portable-parity.smoke.mjs:2
```
import { execFileSync } from "node:child_process";
```
plugins/data-analytics/tests/sites-export.test.mjs:2
```
import { execFileSync } from "node:child_process";
```

Credentials referenced

No key, token or secret environment variable found in code or MCP config.

Static scan of commit 0722921 on 2026-10-27. Signals are patterns found in the files, not a verdict: a network call can be the whole point of a skill. Read the linked lines before you decide. How the scan works.