Skills
Navigate
skills/jeremylongshore/tons-of-skills-marketplace/clickhouse-install-auth/Gen Agent Trust Hub

clickhouse-install-auth

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs official ClickHouse client packages, including @clickhouse/client for Node.js and clickhouse-connect for Python. These are recognized as legitimate dependencies from a well-known database service provider.
  • [INDIRECT_PROMPT_INJECTION]: The skill involves a data ingestion surface where the agent processes user-provided connection credentials.
  • Ingestion points: User inputs for hostname, username, and password, as well as reading existing .env files.
  • Boundary markers: None explicitly defined in the prompt instructions to delimit user data from instructions.
  • Capability inventory: Uses Bash for package installation and Write for creating .env and client files.
  • Sanitization: The skill promotes best practices by instructing the agent to ensure credentials are kept in a .env file that is added to .gitignore, preventing accidental exposure in version control.
  • [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were detected in the skill instructions or referenced code blocks.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:45 AM