{"id":48416,"plugin_id":"plugins_6ac7198c35d48191857f44d58398daf7","kind":"skill","collection_source":"plugin_package","comparison_source":null,"observed_at":"2026-10-24T13:36:24.698Z","digest":"cb8545bd4e21c251de735eaddd12e3f4d9e8b74c3042231957d997e257953a62","against":null,"payload":{"description":"Inspect embedded dashboard configuration, trusted domains, origins, guest-token routing, and embedded RLS routing through direct Superset API calls. Use only for direct API workflows; Do not use for MCP-only work.","included_files":[{"relative_path":"references/embedded-config-mutations.md","size_in_bytes":961},{"relative_path":"references/embedded-config-reads.md","size_in_bytes":1155},{"relative_path":"references/embedded-rls.md","size_in_bytes":671},{"relative_path":"references/guest-tokens.md","size_in_bytes":664},{"relative_path":"references/trusted-domains-and-origins.md","size_in_bytes":1295}],"name":"preset-embedding","skill_md_contents":"---\nname: preset-embedding\ndescription: Inspect embedded dashboard configuration, trusted domains, origins, guest-token routing, and embedded RLS routing through direct Superset API calls. Use only for direct API workflows; Do not use for MCP-only work.\n---\n\n# preset-embedding\n\nUse for embedded dashboard configuration reads and security-sensitive routing.\n\n## Always\n\n- Auth and conventions come from `preset-api` (JWT exchange, base URLs, Rison); resolve the workspace hostname through the Management API when it is not already known. Consult `preset-superset` only when permissions drift matters.\n- Default to embedded configuration reads.\n- Route guest-token creation to `preset-guest-tokens`.\n- Route embedded RLS design/review to `preset-embedded-rls`.\n- Require explicit confirmation before embedded config mutations, guest tokens, trusted domain changes, or access-token key changes.\n\n## Decision Rules\n\n- Distinguish config reads from trusted-domain mutations, guest-token issuance, and RLS changes.\n- Require approval before broadening domains or issuing tokens.\n- Route domain, token, and RLS requests to the correct guardrail.\n- Avoid mutating embedded configuration.\n\n## Workflow Order\n\n1. Inspect embedded dashboard configuration.\n2. Classify domain, token, and RLS request type.\n3. Prepare approval summary for mutation or token issuance.\n4. Stop before broadening domains, mutating config, or issuing tokens.\n\n## Retrieve\n\n- Embedded dashboard configuration reads: [references/embedded-config-reads.md](references/embedded-config-reads.md)\n- Embedded config create/update/delete routing: [references/embedded-config-mutations.md](references/embedded-config-mutations.md)\n- Trusted domains and origins: [references/trusted-domains-and-origins.md](references/trusted-domains-and-origins.md)\n- Guest-token routing: [references/guest-tokens.md](references/guest-tokens.md)\n- Embedded RLS routing: [references/embedded-rls.md](references/embedded-rls.md)\n"},"changes":[],"summary":"First saved snapshot. No earlier version is available for comparison.","summary_kind":"deterministic","summary_metadata":{}}