daft
Eventual-Inc/DaftPlugin
Skills for working with Daft, a high-performance data engine for AI and multimodal workloads. Includes UDF performance tuning, distributed scaling with Ray, and documentation navigation.
Why this score
Popularity score: 88/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 22, 2026 at commit eb10366e0761, first 300 source files (it's a large repo), with Cisco's open-source skill-scanner.
What its code does:
- Reads environment variables and sends network requests with them API clients do this to send your key to the service. Check which service it talks to.
- Runs shell commands Common for dev tools. Read the commands it runs.daft/functions/process.py:30 and 1 more
- Runs code it builds while running (eval or exec) Harder to read ahead of time, since the code is assembled while it runs.tools/attach_debugger.py:67 and 1 more
- Makes network requestsdaft/functions/conftest.py:33, daft/scarf_telemetry.py:101 and 2 more
- Reads environment variables, where API keys usually livedaft/execution/udf.py:67
- Uses dependencies without a pinned version A later version of a dependency could change what runs.docs/plugins/setup.py:11
Web addresses in its code:
- docs.daft.aidaft/context.py:252
- docs.ray.iodaft/convert.py:219
- arrow.apache.orgdaft/convert.py:100
- pandas.pydata.orgdaft/dataframe/dataframe.py:850
- docs.rsdaft/functions/agg.py:77
- iceberg.apache.orgdaft/dataframe/dataframe.py:1338
- huggingface.codaft/datasets/droid.py:294
- py.iceberg.apache.orgdaft/dataframe/dataframe.py:1345
- picloud.comdaft/pickle/cloudpickle.py:24
- pytorch.orgdaft/dataframe/dataframe.py:5857
- sqlglot.comdaft/io/_sql.py:58
- web.archive.orgdaft/pickle/cloudpickle.py:24
- arxiv.orgdaft/functions/agg.py:78
- boto3.amazonaws.comdaft/filesystem.py:76
- cloud.google.comdaft/dataframe/dataframe.py:2643
And 18 more.
These are the sites named in the code, so it's where your data could go. It isn't a complete list: code can build addresses while it runs, and a few of these may be links rather than calls. Whatever you send also goes to the AI model you use.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Nothing from another maker does quite the same job yet.