clickhouse-ci-integration

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill configures GitHub Actions workflows to download official, well-known actions including actions/checkout and actions/setup-node from the official GitHub organization.
  • [COMMAND_EXECUTION]: The provided CI workflow uses standard tools like curl to initialize a local database instance within the ephemeral CI environment and npm to execute test suites.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes a testing surface that processes database data. It proactively mitigates injection risks by demonstrating the implementation of parameterized queries ({uid:UInt64}) in the example test code.
  • [CREDENTIALS_UNSAFE]: The skill uses standard default credentials (default user with no password) intended specifically for local, ephemeral Docker containers in CI, and includes explicit instructions to use GitHub Secrets for any non-ephemeral or production environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:43 AM