clickhouse-ci-integration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill configures GitHub Actions workflows to download official, well-known actions including
actions/checkoutandactions/setup-nodefrom the official GitHub organization. - [COMMAND_EXECUTION]: The provided CI workflow uses standard tools like
curlto initialize a local database instance within the ephemeral CI environment andnpmto execute test suites. - [INDIRECT_PROMPT_INJECTION]: The skill describes a testing surface that processes database data. It proactively mitigates injection risks by demonstrating the implementation of parameterized queries (
{uid:UInt64}) in the example test code. - [CREDENTIALS_UNSAFE]: The skill uses standard default credentials (
defaultuser with no password) intended specifically for local, ephemeral Docker containers in CI, and includes explicit instructions to use GitHub Secrets for any non-ephemeral or production environments.
Audit Metadata