clickhouse-core-workflow-a
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The skill correctly recommends using environment variables (e.g.,
process.env.CLICKHOUSE_HOST) for database connection strings rather than hardcoding credentials, which is a security best practice. - [EXTERNAL_DOWNLOADS]: The skill references the official
@clickhouse/clientNode.js package and links to authoritative documentation atclickhouse.com. These are well-known, trusted resources for the stated purpose of the skill. - [COMMAND_EXECUTION]: The skill includes SQL DDL and TypeScript examples for table creation. This code is intended for database administration and does not contain arbitrary system command execution or unauthorized access patterns.
- [PROMPT_INJECTION]: No attempts to override agent instructions or bypass safety filters were found in the instructional content or metadata.
Audit Metadata