clickhouse-js-node-rowbinary

Pass

Audited by Gen Agent Trust Hub on Aug 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides building blocks and monomorphization techniques for ClickHouse RowBinary codecs. All external resources and packages (e.g., @clickhouse/datatype-parser) originate from the official ClickHouse vendor organizations or trusted registries.
  • [DATA_EXPOSURE]: The test suite (tests/clickhouse.ts) correctly manages ClickHouse credentials using environment variables (CLICKHOUSE_USER, CLICKHOUSE_PASSWORD), which is an industry-standard safe practice for automated testing.
  • [COMMAND_EXECUTION]: No dangerous shell commands or unauthorized subprocess executions were detected. The skill generates code through functional composition rather than using high-risk dynamic evaluation like eval() or new Function() on untrusted input.
  • [OBFUSCATION]: Analysis of tests/wasm-int128.experiment.mjs confirmed that the raw byte sequences are legitimate WebAssembly module definitions used for performance benchmarking of 128-bit integer operations and do not contain hidden malicious payloads.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 7, 2026, 01:41 PM
Security Audit — agent-trust-hub — clickhouse-js-node-rowbinary