nao — security grade SAFE, quality 65/100

Security audit verdict: SAFE · quality 65/100

No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

by getnao · Agent Tool · ★ 1.7k

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

🔒 Is nao safe to install? View the security audit →

About nao

nao The #1 Open-Source Analytics Agent 🌐 Website · 📚 Documentation · 💬 Slack What is nao? nao is a framework to build and deploy analytics agent. Create the context of your analytics agent with nao-core cli: data, metadata, modeling, rules, etc. Deploy a UI for anyone to chat with your agent and run analytics on your data. Key Features For data teams: 🧱 Open Context Builder — Create a file-system like context for your agent. Add anything you want in the context: data, metadata, docs, tools, MCPs. No limit. 🏳️ Data Stack Agnostic — Works with any data warehouse, stack, type of context, LLM. 🕵🏻‍♀️ Agent Reliability Visibility — Unit test your agent performance before deploying it to users. Version the context and track the performance of your agent over time. Get users f

agentic-analyticsanalyticsanalytics-engineeringbigquerybusiness-intelligencechat-with-your-datacontext-engineeringdatadata-analysisdata-analyst

Quick Facts

Stars1,678
Forks257
LanguageTypeScript
CategoryAgent Tool
Quality Score64.9150840804099/100
Open Issues227
Last Updated2026-09-22
Created2025-12-30
Platformscli, node
Est. Tokens~15k

Compatible Skills

These tools work well together with nao for enhanced workflows:

  • ktx — semantic(0.42)+complementary+rare_topics+same_lang+similar_pop+shared_platform (78%)
  • ktx-ai-data-agents-mcp-context-skills — semantic(0.40)+complementary+rare_topics+same_lang+similar_pop+shared_platform (78%)
  • ktx-ai-data-agents-context — semantic(0.40)+complementary+rare_topics+same_lang+similar_pop+shared_platform (78%)
  • bonnard-cli — semantic(0.38)+complementary+rare_topics+same_lang+shared_platform (68%)

nao alternative? Top 6 similar tools

Looking for a nao alternative? If you're comparing nao with other agent tool tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • altimate-code by AltimateAI · ⭐ 813

    Open-source agentic data engineering harness for dbt, SQL, and cloud warehouses. 100+ tools, 10 warehouses, AI

  • ktx by Kaelio · ⭐ 1.6k

    ktx is an executable context layer for data and analytics agents 🐙 Allow Claude Code, Codex, or other AI agen

  • ktx-ai-data-agents-context by Kaelio · ⭐ 758

    ktx is an executable context layer for data and analytics agents 🐙 Allow Claude Code, Codex, and any AI agent

  • ktx-ai-data-agents-mcp-context-skills by Kaelio · ⭐ 599

    ktx is an executable context layer for data and analytics agents 🐙 Allow Claude Code, Codex, and any AI agent

  • wren-engine by Canner · ⭐ 663

    The open context engine for AI agents support 15+ data sources. Built on Rust and Apache DataFusion.

  • rill by rilldata · ⭐ 2.9k

    The fastest business intelligence tool for humans and agents.

More Agent Tool Tools

Explore other popular agent tool tools:

View all Agent Tool tools →

Popular TypeScript Agent Tools

Frequently Asked Questions

What is nao?

nao is 👾 nao is an open source analytics agent. (1) Create context with nao-core cli, (2) deploy nao chat interface for everyone. It is categorized as a Agent Tool with 1.7k GitHub stars.

What programming language is nao written in?

nao is primarily written in TypeScript. It covers topics such as agentic-analytics, analytics, analytics-engineering.

How do I install or use nao?

You can find installation instructions and usage details in the nao GitHub repository at github.com/getnao/nao. The project has 1.7k stars and 257 forks, indicating an active community.

What are the best alternatives to nao?

The top alternatives to nao on Agent Skills Hub include altimate-code, ktx, ktx-ai-data-agents-context. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse Agent Tool tools