clickhouse-security-basics
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard and secure guidance for ClickHouse database hardening, covering RBAC, row-level security, and network allowlists.
- [SAFE]: Credentials and secrets are handled securely in code examples, using placeholders like 'strong-password-here' or referencing environment variables (e.g., process.env.CH_PASSWORD) for sensitive data.
- [SAFE]: The referenced Node.js package, @clickhouse/client, is the official and well-known library for interacting with ClickHouse.
- [SAFE]: Configuration fragments for config.xml and users.xml follow established documentation for enabling TLS and restricting network access.
Audit Metadata