agent-clickhouse-io
Fail
Audited by Socket on Feb 21, 2026
1 alert found:
Obfuscated FileObfuscated Filesub-skills/bulk-insert-recommended.md
HIGHObfuscated FileHIGH
sub-skills/bulk-insert-recommended.md
No signs of intentional malicious behavior or backdoor activity in this single file. However, the code exhibits a clear security vulnerability: unsafe string interpolation of untrusted Trade object fields into SQL, creating a high risk for SQL injection and batch-level data corruption. Refactor to use parameterized inserts or safe streaming APIs and add input validation/escaping before deployment.
Confidence: 98%
Audit Metadata