clickhouse-upgrade-migration
Warn
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill contains instructions to execute commands with elevated privileges using 'sudo', which are necessary for system-level tasks such as managing the ClickHouse service and installing software packages. Evidence in 'references/implementation.md' and 'references/examples.md' includes commands such as 'sudo systemctl stop clickhouse-server', 'sudo apt-get install clickhouse-server clickhouse-client', and 'sudo systemctl start clickhouse-server'.
- [COMMAND_EXECUTION]: The skill utilizes 'curl' and the 'clickhouse-client' CLI to interact with and query the ClickHouse database server for version checking and administrative tasks. Evidence in 'SKILL.md' and 'references/implementation.md' includes 'curl http://localhost:8123/?query=SELECT+version()' and 'clickhouse-client --query BACKUP DATABASE...'.
- [EXTERNAL_DOWNLOADS]: The skill performs installations of external dependencies from the npm registry. Evidence in 'SKILL.md' includes 'npm install @clickhouse/client@latest'. This targets the official client for a well-known database service.
Audit Metadata