windsor-ai
Enables natural language access to over 325 data sources for analytics and insights, enhancing marketing and performance analysis.
Install this skill
Security score
The windsor-ai skill was audited on Mar 3, 2026 and we found 19 security issues across 4 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 58 | ```json |
Access to hidden dotfiles in home directory
| 39 | echo 'WINDSOR_API_KEY=your_api_key_here' >> ~/.clawdbot/.env |
Access to hidden dotfiles in home directory
| 50 | > **Note:** mcporter requires `WINDSOR_API_KEY` to be exported as a shell environment variable. Simply storing it in `~/.clawdbot/.env` is not enough — it must be available in your active shell sessio |
Access to hidden dotfiles in home directory
| 52 | > **Security note:** Avoid appending the key to `~/.zshrc` or other shell rc files, as this stores your secret in plaintext and loads it into every shell session. Prefer your system keychain, a secret |
Access to hidden dotfiles in home directory
| 80 | You should see `windsor-ai` listed with its available tools. If you see an authentication error, confirm that `WINDSOR_API_KEY` is correctly set in `~/.clawdbot/.env`. |
Access to hidden dotfiles in home directory
| 192 | - Verify `WINDSOR_API_KEY` is set in `~/.clawdbot/.env` |
Access to hidden dotfiles in home directory
| 199 | - To load from your `.env` file: `export $(grep -v '^#' ~/.clawdbot/.env | xargs) && npx mcporter list` |
Access to .env file
| 39 | echo 'WINDSOR_API_KEY=your_api_key_here' >> ~/.clawdbot/.env |
Access to .env file
| 50 | > **Note:** mcporter requires `WINDSOR_API_KEY` to be exported as a shell environment variable. Simply storing it in `~/.clawdbot/.env` is not enough — it must be available in your active shell sessio |
Access to .env file
| 52 | > **Security note:** Avoid appending the key to `~/.zshrc` or other shell rc files, as this stores your secret in plaintext and loads it into every shell session. Prefer your system keychain, a secret |
Access to .env file
| 80 | You should see `windsor-ai` listed with its available tools. If you see an authentication error, confirm that `WINDSOR_API_KEY` is correctly set in `~/.clawdbot/.env`. |
Access to .env file
| 192 | - Verify `WINDSOR_API_KEY` is set in `~/.clawdbot/.env` |
Access to .env file
| 197 | - mcporter requires the variable to be exported in your shell, not just stored in `.env` |
Access to .env file
| 199 | - To load from your `.env` file: `export $(grep -v '^#' ~/.clawdbot/.env | xargs) && npx mcporter list` |
Access to system keychain/keyring
| 52 | > **Security note:** Avoid appending the key to `~/.zshrc` or other shell rc files, as this stores your secret in plaintext and loads it into every shell session. Prefer your system keychain, a secret |
External URL reference
| 9 | Use this skill to query, explore, and analyze your [Windsor.ai](https://windsor.ai) connected and business data using natural language. Windsor.ai aggregates data from 325+ platforms: Facebook Ads, Go |
External URL reference
| 30 | 1. Log in to your Windsor.ai account at https://windsor.ai |
External URL reference
| 63 | "baseUrl": "https://mcp.windsor.ai/sse", |
External URL reference
| 203 | - Visit https://windsor.ai to connect your ad platforms or analytics tools |