byted-bytehouse-slow-query
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script dynamically downloads the ByteHouse MCP server from the vendor's official GitHub repository (github.com/volcengine/mcp-server) at runtime.
- [REMOTE_CODE_EXECUTION]: Uses the
uvxutility to execute the downloaded MCP server code. This allows the skill to utilize the vendor's latest database interface tools without embedding complex connection logic directly in the skill scripts. - [COMMAND_EXECUTION]: The script executes the
uvxtool to launch the database connector process. - [SAFE]: Database credentials are required to be set in environment variables, which is the recommended approach for secure secret management. The tool's operations are limited to read-only performance analysis of system logs and local report generation.
Audit Metadata