The Agent Skills Directory

[SAFE]: The skill is a technical guide for ClickHouse database management and does not contain any malicious instructions or obfuscated code. All code snippets provided are standard for database administration and application development.
[PROMPT_INJECTION]: The skill includes defensive instructions, explicitly warning to use query_params with {name:Type} placeholders in the Node.js client to prevent SQL injection vulnerabilities.
[CREDENTIALS_UNSAFE]: The Node.js client initialization examples follow security best practices by utilizing environment variables (process.env.CLICKHOUSE_PASSWORD) for sensitive credentials rather than hardcoding secrets.
[COMMAND_EXECUTION]: The documentation mentions ClickHouse-specific table functions like file(), url(), and s3(). These are documented as standard database features for data ingestion and do not involve arbitrary shell command execution or unauthorized system access.

clickhouse-js