infra-postgres
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides an installation command for
clickhousectlusingcurl -fsSL https://clickhouse.com/cli | sh. While this pattern involves executing a remote script, the source is the official domain of the skill author (ClickHouse Inc), representing standard and expected installation behavior for their tooling. - [COMMAND_EXECUTION]: The skill instructions include numerous shell commands for managing Docker containers and interacting with cloud APIs. These are primary functionalities of the skill (database management) and operate within the context of the user's explicit requests (e.g., starting a local database or creating a cloud service).
- [CREDENTIALS_UNSAFE]: The skill correctly follows security best practices for credential management. It explicitly instructs the user to run authentication commands in a separate terminal to keep secrets out of chat history and suggests using
.envfiles for environment variable storage.
Audit Metadata