chdb-datastore
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the 'chdb' library from the official Python Package Index (PyPI). This is a well-known library for ClickHouse-backed data processing.
- [CREDENTIALS_UNSAFE]: The documentation and examples provide connection strings for various databases and cloud storage services. All provided credentials (e.g., 'root', 'pass', 'AKIA...') are clearly placeholders for demonstration and do not represent actual exposed secrets.
- [PROMPT_INJECTION]: The skill allows the agent to process data from external files and remote databases, creating an attack surface for indirect prompt injection. 1. Ingestion points: Methods like DataStore.from_file and from_s3 in SKILL.md. 2. Boundary markers: Absent. 3. Capability inventory: File reading and writing, network operations to databases and S3 storage. 4. Sanitization: Absent. As these capabilities are central to the skill's intended purpose for data analysis, the risk is inherent and managed.
Audit Metadata