clickhouse-io
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents patterns for ingesting data from external sources, including PostgreSQL databases and streaming data pipelines.
- Ingestion points:
etlPipeline(extracts data from Postgres),streamInserts(processes an externaldataSource), and the CDC listener (receivesmarket_updatesnotifications). - Boundary markers: None identified in the provided templates.
- Capability inventory: The skill uses
clickhouse.queryandclickhouse.insertto execute SQL and batch operations. - Sanitization: The provided snippets show basic transformation logic (mapping values) but do not include explicit sanitization of input data before database insertion. This is standard for educational templates focused on architecture rather than validation logic.
- [SAFE]: The code snippets follow security best practices by utilizing environment variables (
process.env.CLICKHOUSE_PASSWORD,process.env.DATABASE_URL) to handle credentials, avoiding the risk of hardcoded secrets.
Audit Metadata