clickhouse-js-node-troubleshooting

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a legitimate troubleshooting guide for the @clickhouse/client Node.js package, providing documentation on common errors like socket hang-ups, data type mismatches, and TLS configuration.
  • [PROMPT_INJECTION]: The skill promotes security best practices by explicitly advising against template literal interpolation for user-controlled values in reference/query-params.md. It instructs the agent to recommend parameterized queries using the native {name: type} syntax to prevent SQL injection.
  • [DATA_EXPOSURE_EXFILTRATION]: The documentation for TLS setup in reference/tls.md involves reading certificate files from local paths (e.g., certs/CA.pem). This is standard procedure for configuring mutual TLS and certificate verification. The skill uses placeholders for sensitive values like usernames and passwords.
  • [PRIVILEGE_ESCALATION]: While reference/tls.md mentions the rejectUnauthorized: false option for development environments to bypass certificate verification, it includes a prominent warning (⚠️) stating that this should never be used in production. This is a standard developer triage step.
  • [EXTERNAL_DOWNLOADS]: The skill contains references to official ClickHouse documentation and their public GitHub repository (e.g., clickhouse.com, github.com/ClickHouse/clickhouse-js). These are official, well-known resources for the software being supported.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 01:16 AM