altinity-expert-clickhouse-caches
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill queries
system.query_logto analyze table access patterns. Since table names in ClickHouse can be user-defined, they represent a potential vector for indirect prompt injection if an attacker creates tables with names containing malicious instructions. The agent processes these names during diagnostics without explicit boundary markers.\n - Ingestion points:
checks.sql(retrieving thetablesarray fromsystem.query_log).\n - Boundary markers: None identified in the diagnostic instructions.\n
- Capability inventory: Read-only SQL queries against system tables.\n
- Sanitization: No sanitization of metadata or table names is performed before analysis.
Audit Metadata