altinity-expert-clickhouse-storage
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and analyzes data from ClickHouse system tables, including query logs (system.query_log) and table metadata (system.tables, system.columns). If these tables contain maliciously crafted content (such as specific query strings or object names), they could potentially influence the agent's subsequent reasoning.
- Ingestion points: Diagnostic queries in checks.sql targeting system.query_log (query previews), system.tables, and system.columns.
- Boundary markers: The queries do not include specific delimiters or instructions to ignore embedded instructions in the database output.
- Capability inventory: The skill is scoped to diagnostic SQL execution within a ClickHouse environment.
- Sanitization: No explicit sanitization of database results is performed before analysis.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a series of SQL queries defined in checks.sql. These queries use the clusterAllReplicas function to perform distributed diagnostics across the ClickHouse cluster. This is standard functionality for database administration skills.
Audit Metadata