Clickhouse Database
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill's instructions (using clickhouse-client and optional jq) match its ClickHouse DB purpose and there are no unrelated requirements or install steps, though it expects the user to provide database credentials and may run arbitrary SQL if invoked.
This skill is coherent for ClickHouse administration, but take these precautions before installing/using it: (1) ensure clickhouse-client and jq are installed from trusted sources; (2) provide the minimal-privilege DB credentials possible (ideally a read-only user for query tasks); (3) avoid exposing high-privilege credentials in environment variables or plaintext config files—if you must, restrict file permissions and consider using a secrets manager; (4) be cautious when allowing the agent to run multiquery / ALTER / DELETE statements—review queries before execution; (5) because the skill is instruction-only it won't install code itself, but the agent invoking these shell commands will have the same access as your agent runtime—limit autonomous invocation or restrict env vars if you don't want the agent to run destructive operations.
SkillSpector
SkillSpector findings are pending for this release.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.