altinity-expert-clickhouse-merges
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements diagnostic queries for ClickHouse using read-only system tables. It follows security best practices by including LIMIT clauses and time-bounding filters (interval 24 hour) to prevent resource exhaustion during analysis.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes data from ClickHouse system tables, which serves as an ingestion point for metadata. While this data could be influenced by database users (e.g., table names), the risk is minimized by the skill's read-only scope and lack of network or file-system capabilities.\n
- Ingestion points: Database results from
system.merges,system.part_log, andsystem.partsviachecks.sql.\n - Boundary markers: No explicit delimiters or instructions are provided to the agent to treat this data as untrusted.\n
- Capability inventory: Limited to database
SELECTqueries; no file system, network, or shell execution capabilities.\n - Sanitization: No specific filtering or escaping is applied to the metadata retrieved from the system tables.
Audit Metadata