clickhouse-io
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides TypeScript examples that execute SQL queries against ClickHouse and PostgreSQL databases. While these are standard for the skill's purpose, the examples use string interpolation for data values in bulk inserts, which represents a potential SQL injection surface if the source data is untrusted and not sanitized by the user implementation.- [DATA_EXPOSURE_EXFILTRATION]: The skill follows security best practices by using environment variables (
process.env.CLICKHOUSE_PASSWORD,process.env.DATABASE_URL) for database credentials instead of hardcoding sensitive information.
Audit Metadata