cc-skill-clickhouse-io
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE_EXFILTRATION]: The skill demonstrates secure configuration management by instructing the use of environment variables (e.g.,
CLICKHOUSE_PASSWORD,DATABASE_URL) rather than hardcoding sensitive credentials. - [INDIRECT_PROMPT_INJECTION]: The skill describes patterns for ingesting external data through ETL and Change Data Capture (CDC) workflows. It explicitly mitigates injection risks by advising against SQL string concatenation and recommending structured inserts via established client libraries.
- [EXTERNAL_DOWNLOADS]: The code snippets reference standard, well-known Node.js libraries including
@clickhouse/clientandpgfor database connectivity. References point to official documentation at clickhouse.com.
Audit Metadata