clickhouse-js-node-troubleshooting
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate troubleshooting guide for the @clickhouse/client Node.js package, providing documentation on common errors like socket hang-ups, data type mismatches, and TLS configuration.
- [PROMPT_INJECTION]: The skill promotes security best practices by explicitly advising against template literal interpolation for user-controlled values in
reference/query-params.md. It instructs the agent to recommend parameterized queries using the native{name: type}syntax to prevent SQL injection. - [DATA_EXPOSURE_EXFILTRATION]: The documentation for TLS setup in
reference/tls.mdinvolves reading certificate files from local paths (e.g.,certs/CA.pem). This is standard procedure for configuring mutual TLS and certificate verification. The skill uses placeholders for sensitive values like usernames and passwords. - [PRIVILEGE_ESCALATION]: While
reference/tls.mdmentions therejectUnauthorized: falseoption for development environments to bypass certificate verification, it includes a prominent warning (⚠️) stating that this should never be used in production. This is a standard developer triage step. - [EXTERNAL_DOWNLOADS]: The skill contains references to official ClickHouse documentation and their public GitHub repository (e.g., clickhouse.com, github.com/ClickHouse/clickhouse-js). These are official, well-known resources for the software being supported.
Audit Metadata