infra-clickhouse
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides an installation command
curl -fsSL https://clickhouse.com/cli | shto install theclickhousectlCLI. The source domainclickhouse.comis the official domain of the skill author (ClickHouse Inc), making this a standard and trusted installation path for the tool. - [COMMAND_EXECUTION]: The skill uses various
clickhousectlsubcommands (local,cloud,server,client) to manage database services. These are legitimate uses of the tool for its intended purpose. It also usesopensslto generate secure random passwords for new database users. - [CREDENTIALS_UNSAFE]: The skill provides robust guidance for secret management. It instructs the user to input API keys in a separate terminal to keep them out of LLM logs and explicitly advises adding credentials to a
.envfile that must be gitignored.
Audit Metadata