The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses clickhousectl for interacting with ClickHouse Cloud, which is the official CLI tool from the vendor.
[EXTERNAL_DOWNLOADS]: The skill includes a command to install the clickhousectl CLI directly from the official ClickHouse website (clickhouse.com/cli) using curl | sh. This is the documented installation method for this vendor's official tool.
[EXTERNAL_DOWNLOADS]: The skill pulls official Docker images from GitHub Container Registry (ghcr.io/open-telemetry/*) and Docker Hub (clickhouse/clickstack-otel-collector), which are trusted sources for these specific components.
[CREDENTIALS_UNSAFE]: Secret management is handled securely. The skill generates tokens and passwords locally, writes them to a file with restricted permissions (0600), and passes them to containers via environment files rather than command-line arguments. It also uses SHA-256 hashing to ensure plaintext passwords never reach the database logs or query history.
[PROMPT_INJECTION]: No malicious prompt injection patterns or attempts to bypass AI safety guardrails were detected.
[DATA_EXFILTRATION]: No patterns of sensitive data exfiltration or unauthorized network communication were found. Network operations are restricted to official ClickHouse endpoints and the local OTLP collector.

clickstack-otel-collector