infra-clickhouse

Pass

Audited by Gen Agent Trust Hub on Jul 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides an installation command curl -fsSL https://clickhouse.com/cli | sh to install the clickhousectl CLI. The source domain clickhouse.com is the official domain of the skill author (ClickHouse Inc), making this a standard and trusted installation path for the tool.
  • [COMMAND_EXECUTION]: The skill uses various clickhousectl subcommands (local, cloud, server, client) to manage database services. These are legitimate uses of the tool for its intended purpose. It also uses openssl to generate secure random passwords for new database users.
  • [CREDENTIALS_UNSAFE]: The skill provides robust guidance for secret management. It instructs the user to input API keys in a separate terminal to keep them out of LLM logs and explicitly advises adding credentials to a .env file that must be gitignored.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 27, 2026, 11:32 AM
Security Audit — agent-trust-hub — infra-clickhouse