Byted Bytehouse Multimodal Search

This skill appears to implement the ByteHouse + Volcano Engine Ark multimodal search it claims, but there are important caveats to review before installing or running it: - Registry metadata omission: The registry declares no required env vars or primary credential, but the code needs ARK_API_KEY (for embeddings) and BYTEHOUSE_* credentials (host, user, password, database). Treat this omission as a transparency issue — do not provide high-privilege credentials without verifying the source. - Limit credentials and scope: Create and supply least-privilege credentials (a ByteHouse user limited to the specific database/tables and an API key with only embedding permission) rather than root/admin DB credentials. - Review and test code locally: The package includes Python scripts. Inspect them (you already have them) and run in a sandboxed environment before giving it network access or real credentials. - Beware SQL construction: insert_document and other methods build SQL using f-strings and interpolate table_name and content; avoid passing untrusted values or sanitize inputs first to prevent injection or malformed SQL. - Verify third-party packages: SKILL.md instructs pip installing clickhouse-connect and volcengine-sdk. Confirm these are the official packages, and consider installing into an isolated virtual environment. - MCP client behavior: The code tries to use an mcp_client if present (it may call other tools or skills). If you rely on MCP, understand what that client does; if unsure, initialize the search client with prefer_mcp=False. - Network/data exfiltration: The skill will send content (text/image/video URLs) and embeddings to external Ark endpoints and connect to your ByteHouse instance. Do not pass sensitive data (personal data, secrets) unless you accept that it will be transmitted to those endpoints. If you need higher assurance: ask the publisher for an explicit list of required env vars in the registry and for a signed package or known homepage. If you cannot verify the source, run in a restricted environment or decline installation.