huaweicloud/huaweicloud-skills110 installs

huawei-cloud-mrs-clickhouse-sql-check

Q: How do I install this agent skill?

Run npx skills add https://github.com/huaweicloud/huaweicloud-skills --skill huawei-cloud-mrs-clickhouse-sql-check.

Q: Is this agent skill safe to install?

Review the displayed partner audits, complete source, permissions, dependencies, and exact revision before installing.

A reusable agent skill published by huaweicloud/huaweicloud-skills.

How do I install this agent skill?

npx skills add https://github.com/huaweicloud/huaweicloud-skills --skill huawei-cloud-mrs-clickhouse-sql-check

view source ↗

Is this agent skill safe to install?

Gen Agent Trust Hubfail
The skill provides ClickHouse SQL syntax and specification validation but is rated high risk due to a command injection vulnerability. Its instructions direct the agent to execute shell commands by inserting user-supplied SQL directly into command strings, which allows a malicious user to run arbitrary code on the system using shell metacharacters. Additionally, the skill employs dynamic module loading based on user input, which is a recognized security risk pattern.
Socketpass
No alerts
Snykpass
Risk: LOW · No issues

How can the creator link this skill?

Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.

<a href="https://skillzs.dev/skills/huaweicloud/huaweicloud-skills/huawei-cloud-mrs-clickhouse-sql-check">View huawei-cloud-mrs-clickhouse-sql-check on skillZs</a>