Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsBlogPro
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Authors
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges
  • Chrome Extension
  • Skill Manager

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

ProTermsPrivacyRefunds
Back to skills

Thoughtspot

ASecurity

Expert coverage of ThoughtSpot across all deployment models (Cloud and Software). Provides deep expertise in search-based analytics, the search-token architecture, Spotter AI assistant, SpotIQ automated insights, Liveboards, Models (semantic layer), TML (ThoughtSpot Modeling Language), ThoughtSpot Everywhere (embedded analytics with Visual Embed SDK), REST API v2.0, Falcon in-memory engine, SpotCache, cloud data warehouse connectivity, row/column-level security, and performance optimization. ...

4 stars
0 votes
0 copies
1 views
Added 9/24/2026
developmentjavascripttypescriptpythonrustgojavasqlnodeawsapi

Works with

apimcp

Security Analysis

A100/100

Pro scans all 4 files and shows the line behind each finding

Scanned 9/24/2026

$npx -y skills add chrishuffman5/domain-expert --skill thoughtspot --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Thoughtspot?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Thoughtspot
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/chrishuffman5-thoughtspot/badge)](https://www.skillsdirectory.com/skills/chrishuffman5-thoughtspot)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
Files
SKILL.md
---
name: thoughtspot
description: "Expert coverage of ThoughtSpot across all deployment models (Cloud and Software). Provides deep expertise in search-based analytics, the search-token architecture, Spotter AI assistant, SpotIQ automated insights, Liveboards, Models (semantic layer), TML (ThoughtSpot Modeling Language), ThoughtSpot Everywhere (embedded analytics with Visual Embed SDK), REST API v2.0, Falcon in-memory engine, SpotCache, cloud data warehouse connectivity, row/column-level security, and performance optimization. WHEN: \"ThoughtSpot\", \"SpotIQ\", \"Spotter\", \"Liveboard\", \"ThoughtSpot Everywhere\", \"Visual Embed SDK\", \"TML\", \"ThoughtSpot Modeling Language\", \"search analytics\", \"ThoughtSpot search\", \"SpotCache\", \"Falcon engine\", \"ThoughtSpot embedding\", \"SpotterViz\", \"SpotterModel\", \"SpotterCode\", \"ThoughtSpot Cloud\", \"ThoughtSpot Models\", \"ThoughtSpot Worksheets\", \"Spotter Semantics\", \"ThoughtSpot MCP\", \"Analyst Studio\", \"ThoughtSpot Monitor\"."
license: MIT
---

# ThoughtSpot

This skill covers ThoughtSpot across all deployment models -- ThoughtSpot Cloud (SaaS) and ThoughtSpot Software (on-premises):

- Search-based analytics: natural language search, search-token architecture, Sage-enhanced search, analytical keywords
- Spotter AI assistant: conversational analytics, context-aware responses, visualization generation, Spotter 3
- Spotter Agents: SpotterModel (semantic modeling), SpotterViz (dashboard generation), SpotterCode (IDE assistance)
- SpotIQ: automated insight detection (anomaly, trend, correlation, clustering), algorithm tuning, reinforcement learning
- Liveboards: interactive dashboards, cross-filtering, drill-down, scheduling, SpotterViz generation
- Models: next-generation semantic layer (replacing Worksheets), dimensions, measures, relationships, join design
- TML (ThoughtSpot Modeling Language): YAML-based configuration-as-code, version control, CI/CD pipelines, FQN references
- ThoughtSpot Everywhere: Visual Embed SDK (LiveboardEmbed, SpotterEmbed, SearchEmbed, SearchBarEmbed, AppEmbed), REST API v2.0, multi-tenancy (Orgs), custom actions
- Falcon in-memory engine: columnar storage, column indexing, data materialization
- SpotCache: DuckDB-based caching layer for controlling warehouse costs
- Cloud data warehouse connectivity: Snowflake, BigQuery, Databricks, Redshift (live query, no data movement)
- Security: RLS (row-level), CLS (column-level), object-level sharing, group-based access, SAML/OIDC/trusted auth
- Spotter Semantics: AI-native semantic layer with MCP server for external AI agents
- Analyst Studio: native spreadsheet interface, data mashups, data prep agent

When a question relates to ThoughtSpot Cloud vs. Software differences, clarify the deployment model. When the deployment model is unknown, provide general guidance and note where behavior differs.

## When to Use This Agent

**Use this agent when:**
- Question involves ThoughtSpot search, Spotter, or natural language analytics
- User needs help designing Models (semantic layer) or migrating from Worksheets
- Troubleshooting search performance, query execution, or warehouse optimization
- Configuring SpotIQ analysis or tuning insight quality
- Embedding ThoughtSpot with the Visual Embed SDK or REST API
- Setting up TML-based CI/CD pipelines or version control
- Configuring multi-tenant deployments with Orgs
- Managing cloud data warehouse connections (Snowflake, BigQuery, Databricks)
- Setting up RLS, CLS, or authentication for embedded contexts
- Working with SpotCache, Monitor alerts, or Analyst Studio

**Route back to parent when:**
- Question is about choosing between ThoughtSpot and another BI tool (see the `overview` skill in this plugin)
- Question is about general data visualization theory or dimensional modeling (see the `overview` skill in this plugin)
- Question involves a different BI technology entirely

## How to Approach Tasks

1. **Classify** the request:
   - **Search / Spotter** -- Load `references/architecture.md` for search-token architecture, Sage, Spotter agents
   - **Models / semantic layer** -- Load `references/best-practices.md` for Model design, dimensions, measures, join patterns, Spotter optimization
   - **SpotIQ / insights** -- Load `references/diagnostics.md` for algorithm tuning, insight quality, performance
   - **Liveboards / visualization** -- Load `references/best-practices.md` for Liveboard design, complexity limits, scheduling
   - **Embedding / SDK** -- Load `references/best-practices.md` for Visual Embed SDK patterns, authentication, multi-tenancy, custom actions
   - **TML / CI/CD** -- Load `references/best-practices.md` for TML management, version control, FQN references, package management
   - **Performance** -- Load `references/diagnostics.md` for search performance, warehouse optimization, SpotCache
   - **Connectivity** -- Load `references/diagnostics.md` for connection troubleshooting (Snowflake, BigQuery, Databricks)
   - **Security / governance** -- Load `references/best-practices.md` for RLS, CLS, sharing, groups, SpotCache security
   - **Cluster health (on-prem)** -- Load `references/diagnostics.md` for Falcon engine, node failures, memory, logs

2. **Identify deployment model** -- Determine whether the user runs ThoughtSpot Cloud (live query to cloud warehouses, SpotCache, managed infrastructure) or ThoughtSpot Software (Falcon in-memory database, self-managed clusters). Cloud uses live query architecture; Software includes the Falcon engine for local data storage.

3. **Load context** -- Read the relevant reference file for deep technical detail.

4. **Analyze** -- Apply ThoughtSpot-specific reasoning. Consider the data warehouse backend (Snowflake, BigQuery, Databricks, Redshift), embedding requirements, user audience (business users vs developers), and whether the question involves search optimization or traditional dashboard design.

5. **Recommend** -- Provide actionable guidance with TML examples, SDK code snippets, Model design patterns, SpotIQ tuning parameters, or warehouse optimization recommendations.

6. **Verify** -- Suggest validation steps (Performance Tracking Liveboard, AI/BI Stats data model, Developer Portal Playground for embedding, SpotIQ feedback loop).

## Platform Overview

ThoughtSpot is an AI-driven, search-based analytics platform that differentiates through natural language search, AI-powered insights (SpotIQ), and comprehensive embedded analytics (ThoughtSpot Everywhere). Over 64% of customers use Spotter as their primary analytics interface, with platform usage surging 133% year-over-year (end of fiscal 2025).

### Architecture Pillars

1. **Patented Search-Token Architecture**: Parses natural language queries into structured tokens mapped to a governed semantic model, generating deterministic SQL rather than relying solely on LLM text-to-SQL
2. **Falcon In-Memory Calculation Engine**: Proprietary columnar in-memory database for sub-second query performance (primarily used in ThoughtSpot Software)
3. **Cloud-Native Live Query**: Connects directly to cloud data warehouses (Snowflake, BigQuery, Databricks, Redshift) without data movement, with SpotCache for cost-controlled caching

### Deployment Models

| Aspect | ThoughtSpot Cloud | ThoughtSpot Software |
|---|---|---|
| Hosting | Fully managed SaaS | Self-managed on-premises |
| Data Storage | Live query to cloud warehouses + SpotCache | Falcon in-memory database + connections |
| Updates | Continuous monthly releases | Manual upgrade cycles |
| Infrastructure | Managed by ThoughtSpot | Customer-managed clusters |
| Best For | Cloud-native organizations | Data residency/compliance requirements |

## Search-Based Analytics

### Search-Token Architecture

ThoughtSpot's core innovation. Users type natural language questions into a search bar to generate visualizations:

1. User types a question (e.g., "revenue by region last quarter")
2. The system parses the input into structured **tokens** mapped to data objects (columns, tables, measures, attributes) in the semantic model
3. Tokens are translated into deterministic SQL
4. SQL executes against the data warehouse
5. Results render as an automatically selected visualization

### Sage Search Engine

Integrates generative AI (GPT-based models) with the search-token architecture:
- Understands complex, multi-step analytical questions
- Supplements LLM algorithms with metadata (attribute columns, synonyms, indexed values, formulas, join paths, analytical keywords)
- Generates SQL that respects security controls and business logic from the semantic model
- Provides explanations of how queries were interpreted

### Analytical Keywords

ThoughtSpot supports keywords that modify search behavior: "top 10", "bottom 5", "growth of", "daily", "weekly", "monthly", "quarterly", "yearly", "vs last year", "average", "by", "for each".

## Spotter AI Assistant

### Spotter 3 (Current)

- Conversational analytics: users interact with data through natural language
- Context-aware: maintains conversation context across follow-up questions
- Visualization generation: automatically selects appropriate chart types
- Drill-down: supports iterative exploration through follow-up queries
- Guided insights: proactively surfaces related insights and follow-up questions

### Spotter Agents (GA Early 2026)

| Agent | Capability |
|---|---|
| **SpotterModel** | Natural language to governed semantic models; maps relationships, dimensions, measures with human-in-the-loop validation |
| **SpotterViz** | Prompt-to-Liveboard dashboard generation; plans data story, selects visualizations, builds layout |
| **SpotterCode** | AI-assisted coding in developer IDEs; generates embedding code, TML definitions, API integrations |

## SpotIQ Automated Insights

Augmented analytics engine that automatically delivers personalized insights using ML and generative AI:

### Algorithms

- **Anomaly Detection**: z-scores, median z-scores, Seasonal Hybrid ESD, Linear Regression
- **Trend Analysis**: trends, seasonality, change points in time-series data
- **Comparative Analysis**: cross-dimensional comparisons
- **Clustering**: groups data points based on similarity
- **Correlation Detection**: relationships between measures

### Tuning Parameters

| Parameter | Effect |
|---|---|
| Outlier multiplier | Higher = fewer outliers flagged |
| Maximum P-Value | Lower = more statistically significant results only |
| Min rows for analysis | Minimum data points required |
| Max insight count | Insights per algorithm |
| Exclude nulls/zeros | Remove empty/zero values |

### Reinforcement Learning

- Usage-based ranking algorithm prioritizes relevant insights
- Thumbs-up/thumbs-down feedback mechanism trains the system
- Supervised learning understands user preferences for insight types

## Models (Semantic Layer)

Models are the next-generation semantic layer replacing Worksheets:

- Define dimensions, measures, relationships, and business logic in a governed, reusable structure
- Best practice: connect all Answers and Liveboards to Models, not directly to Tables or Views
- Simplifies TML management (single Model reference vs. multiple table references)
- Spotter optimization tab for indexing, date validation, and column type configuration

## TML (ThoughtSpot Modeling Language)

YAML-based configuration-as-code for all ThoughtSpot objects:

- All objects (Tables, Models, Worksheets, Answers, Liveboards, Monitor alerts) can be exported/imported as TML
- Enables version control, CI/CD pipelines, and programmatic management
- Python library: `thoughtspot-tml` (PyPI) for programmatic manipulation
- **FQN (Fully Qualified Name)**: disambiguates objects with the same name; required when multiple connections or tables share names; always include before importing

## ThoughtSpot Everywhere (Embedding)

### Visual Embed SDK

JavaScript/TypeScript library (`@thoughtspot/visual-embed-sdk`):

| Component | Description |
|---|---|
| LiveboardEmbed | Embed a single visualization or full Liveboard |
| SpotterEmbed | Embed the Spotter AI search and analytics experience |
| SearchEmbed | Embed the full ThoughtSpot Search page |
| SearchBarEmbed | Embed only the ThoughtSpot search bar |
| AppEmbed | Embed the complete ThoughtSpot application |

### Authentication for Embedding

| Method | Description |
|---|---|
| Trusted Authentication | Most seamless SSO; host app authenticates users and passes details to token service; cookie-based and cookieless modes |
| SAML SSO | IdP integration via SAML; supports popup-based auth flow via `inPopup` setting |
| OIDC SSO | OpenID Connect authentication |
| Embedded SSO | Leverages existing IdP with seamless redirect within iframe |
| Basic Auth | Username/password (development only) |

### Multi-Tenancy with Orgs

- Each Org provides isolated content, users, groups, and data access
- Essential for SaaS vendors embedding ThoughtSpot
- Automate Org provisioning via REST API v2.0

### Custom Actions

- **Callback actions**: trigger events to host application with data payloads
- **URL actions**: invoke external URLs with ThoughtSpot data parameters
- Configure per visualization/object type

## SpotCache

- Caching layer built on DuckDB for high-performance columnar storage
- Reduces cost impact of repeated AI-driven queries against cloud data warehouses
- Fixed-cost analytics for AI workloads regardless of query volume
- Tiered dataset size limits based on subscription
- **Security must be applied manually** (not inherited from source warehouse)

## Spotter Semantics (March 2026)

- AI-native semantic layer that transforms raw data into governed business context
- Built on ThoughtSpot's search-token architecture and TML
- **MCP Server**: Model Context Protocol server connecting external AI agents to ThoughtSpot's semantic layer
- Bridges disparate data sources with a single version of truth

## Monitor (Alerts)

| Alert Type | Description |
|---|---|
| Anomaly alerts | Triggered when KPI data is statistically anomalous (SpotIQ-powered) |
| Threshold alerts | Triggered when KPIs cross defined conditions |
| Scheduled notifications | Recurring alerts on hourly/daily/weekly/monthly schedules |

Delivery: email, in-app notifications. TML support for export/import as code.

## Security

- **Row-Level Security (RLS)**: restrict data at the row level based on user/group; rule-based and ACL approaches
- **Column-Level Security (CLS)**: control visibility of specific columns per user/group
- **Object-level sharing**: content accessible only when explicitly shared
- **Group-based access**: hierarchical group structures for managing permissions
- **SOC 2 Type II** certified, **GDPR** compliant
- **AWS PrivateLink** for secure network connectivity

## Anti-Patterns

1. **"Connecting Answers directly to Tables."** Always connect Answers and Liveboards to Models, not directly to Tables or Views. Models provide governed dimensions, measures, business logic, and a single reference point that simplifies maintenance and TML management.

2. **"Multiple Models per Liveboard."** Using multiple Models on a single Liveboard creates cross-model conflicts and unpredictable join behavior. Use one Model per Liveboard for all visualizations.

3. **"Importing TML without FQN references."** When multiple connections or tables share names, TML import fails or maps to the wrong objects. Always add `fqn` parameters to TML before importing.

4. **"Over-indexing high-cardinality columns."** Indexing columns with millions of unique values (transaction IDs, timestamps) consumes excessive memory and slows search suggestions. Index only frequently searched columns like product names, regions, and categories.

5. **"Ignoring SpotCache security."** SpotCache does not inherit security controls from the source warehouse. RLS and CLS must be applied manually on cached datasets. Failing to do so exposes data to unauthorized users.

6. **"No search optimization on Models."** Without enabling Spotter optimization (indexing, date format validation, column type review), search quality degrades. Users get wrong suggestions, incorrect token matching, and poor search relevance.

7. **"Embedding without prefetch."** Loading embedded ThoughtSpot components without calling the SDK's `prefetch` method before `init` causes slow initial render times. Prefetch caches static assets early.

8. **"Using cookie-based auth in embedded contexts."** Modern browsers block third-party cookies. Use cookieless trusted authentication for embedded deployments to avoid silent authentication failures.

## Reference Files

Load these for deep technical detail:

- `references/architecture.md` -- Search-token engine, Sage search, Falcon in-memory engine (columnar storage, column indexing), SpotIQ algorithms and ML integration, Models vs Worksheets, TML configuration-as-code, ThoughtSpot Everywhere (Visual Embed SDK, REST API v2.0, authentication, multi-tenancy), cloud data warehouse connectivity (Snowflake, BigQuery, Databricks), SpotCache (DuckDB-based), Spotter Semantics and MCP server
- `references/best-practices.md` -- Model design (architecture, dimensions, measures, joins, Spotter optimization), search optimization (indexing, naming, keywords), embedding patterns (authentication, SDK components, multi-tenancy, custom actions, security), TML management (version control, CI/CD, FQN, packages), security/governance (RLS, CLS, sharing, SpotCache security, warehouse credentials), performance optimization (warehouse tuning, SpotCache strategy, Liveboard complexity)
- `references/diagnostics.md` -- Search performance (slow queries, poor relevance, token errors), data connectivity (Snowflake, BigQuery, Databricks connection issues, data sync), embedding issues (render failures, auth failures, styling, custom actions), SpotIQ tuning (low-quality insights, performance, learning), cluster health (on-prem: memory, node failures, data loading, logs), cloud diagnostics (AI/BI Stats, SpotCache monitoring)

Attribution

chrishuffman5chrishuffman5
View sourceSee grades on GitHubMore from chrishuffman5 →
SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Related Skills

Clean Code

Pragmatic coding standards - concise, direct, no over-engineering, no unnecessary comments

304955 votes

Browser Extension Developer

Use this skill when developing or maintaining browser extension code in the `browser/` directory, including Chrome/Firefox/Edge compatibility, content scripts, background scripts, or i18n updates.

286712 votes

Seo Optimizer

SEO optimization with keyword analysis, readability assessment, technical validation, content quality. Use for search rankings, blog posts, content audits, or encountering keyword density, readability scores, meta tags, schema markup errors.

2222 votes

Google Official Seo Guide

Official Google SEO guide covering search optimization, best practices, Search Console, crawling, indexing, and improving website search visibility based on official Google documentation

1862 votes

Writing Plans

Use when you have a spec or requirements for a multi-step task, before touching code

2927051 votes
View all in development →