The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The configuration module described in references/implementation.md for src/config/clickhouse.ts contains a hardcoded default password 'dev_password' for the development environment. While common in development templates, this fallback string constitutes a hardcoded credential in the logic.
[INDIRECT_PROMPT_INJECTION]: The scripts/apply-schema.ts file implements a schema migration tool that reads and executes SQL files from the filesystem, representing a potential vulnerability surface for indirect injection if the migration files are sourced from an untrusted location.
Ingestion points: Files in the src/clickhouse/schemas/ directory accessed via fs.readdirSync and fs.readFileSync in scripts/apply-schema.ts.
Boundary markers: None; the script iterates through and executes all .sql files found in the target directory without boundary markers.
Capability inventory: The script uses client.command({ query: sql }) which allows for the execution of arbitrary database commands.
Sanitization: None; the raw content of each SQL file is passed directly to the database client without verification or sanitization.

clickhouse-multi-env-setup