ai-data-analyst-agent

The AI Data Analyst Agent is an AI-powered data analysis application that allows users to upload CSV datasets and ask analytical questions using natural language. The application converts natural-language questions into DuckDB-compatible SQL using Groq, validates the generated SQL through an independent security layer, executes the validated query with DuckDB, and presents the results with tables, visualizations, and AI-generated explanations. The application follows a controlled pipeline that separates data processing, AI reasoning, security validation, SQL execution, and result presentation. Generated SQL is treated as untrusted input. Before execution, every generated query passes through a dedicated SQL security validation layer. The security layer uses SQLGlot to parse SQL into an Abstract Syntax Tree (AST) and validates the query against the application's safety rules. The validator checks SQL statement type, table references, function usage, multiple SQL statements, dangerous SQL operations, query result limits, read-only execution, type conversions, allowed SQL functions, and unqualified dataset table references only. Unsafe SQL is rejected before reaching DuckDB. This creates a security boundary between the LLM and the database. DuckDB is also configured as a second line of defense: external file/network access and temporary-disk spilling are disabled, while memory, thread, result-size, and query-time limits constrain execution resources. The application is designed specifically for read-only analytical workloads.