clickhouse-io
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference guide for ClickHouse database patterns, including table design, query optimization, and data ingestion strategies. It contains no malicious instructions or suspicious code.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The provided TypeScript code snippets demonstrate the use of environment variables (
process.env.CLICKHOUSE_PASSWORD,process.env.DATABASE_URL) to manage sensitive credentials, which aligns with security best practices. No hardcoded secrets or unauthorized network exfiltration patterns were identified. - [REMOTE_CODE_EXECUTION]: The skill uses standard Node.js/TypeScript libraries for database interaction (
clickhouse,pg). It does not contain any patterns for executing remote scripts or arbitrary system commands.
Audit Metadata