Install
$ agentstack add skill-cartodb-agent-skills-carto-manage-platform ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
carto-manage-platform
Org-level operations: managing users and invitations, monitoring quotas, auditing activity, and superadmin bulk ops on resources. Most of these commands require Admin or Superadmin role; non-admin users will see permission errors.
When to use this skill
- Provisioning or removing team members.
- Auditing who did what (security review, debugging unexpected changes).
- Monitoring API and LDS quota consumption.
- Rotating ownership of orphaned resources after a user leaves.
- Bulk-deleting test resources.
For querying activity data interactively (the exploratory side), use [carto-query-datawarehouse/references/activity-queries.md](../carto-query-datawarehouse/references/activity-queries.md). This skill is for the operational/admin surface around activity data.
Quick reference
# Org overview (users, resources, quotas, AI limits)
carto org stats
# User management
carto users list --all --json
carto users invite alice@example.com --role Builder
carto users get alice@example.com
# Activity audit (Enterprise Large+)
carto activity export \
--start-date 2026-04-01 --end-date 2026-04-28 \
--output-dir ./apr-2026
# Superadmin bulk
carto admin list maps --all
carto admin batch-delete
carto admin transfer
What's in this skill
| Topic | Reference | |---|---| | org stats and quota monitoring | [references/org-and-quotas.md](references/org-and-quotas.md) | | users lifecycle: list, invite, role changes, deletion with handoff | [references/users-and-invites.md](references/users-and-invites.md) | | admin superadmin ops: bulk list, batch delete, resource transfer | [references/admin-bulk-ops.md](references/admin-bulk-ops.md) | | Activity event-type catalog (150+ events; full reference) | [references/activity-event-reference.md](references/activity-event-reference.md) | | Advanced activity analyses (success rates, trends, by-category) | [references/advanced-analyses.md](references/advanced-analyses.md) | | Activity-data troubleshooting (DuckDB install, plan gates, TLS) | [references/activity-troubleshooting.md](references/activity-troubleshooting.md) |
Always-on guidance
- Admin permission gates are warehouse-style, not CARTO-style. Even a CARTO Admin will get "permission denied" from
users deleteif the receiver-id isn't valid. Pass valid emails or user IDs; check viausers getfirst. users deleterequires a receiver to inherit the deleted user's resources. Without a receiver argument, the command fails. Plan handoff before deletion:carto users delete.- Activity export is plan-gated. Enterprise Large+ only. Lower plans get a 403; surface that politely if the user is on the wrong tier.
- **
org statsshows what you can see**. Some fields (AI limits, billing) only render for Admin/Superadmin. Don't assume the absence of a field means the resource doesn't exist. - Bulk operations are irreversible.
admin batch-deletedeletes the listed resource IDs without further confirmation per item. Double-check the input list, or do a dry-run withadmin listfirst. - Audit trail comes from
activityevents, not the CLI return values. To answer "who deleted map X", query theMapDeletedevents — see the activity-queries reference.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: CartoDB
- Source: CartoDB/agent-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.