agent-clickhouse-io

Fail

Audited by Socket on Feb 21, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
sub-skills/bulk-insert-recommended.md

No signs of intentional malicious behavior or backdoor activity in this single file. However, the code exhibits a clear security vulnerability: unsafe string interpolation of untrusted Trade object fields into SQL, creating a high risk for SQL injection and batch-level data corruption. Refactor to use parameterized inserts or safe streaming APIs and add input validation/escaping before deployment.

Confidence: 98%
Audit Metadata
Analyzed At
Feb 21, 2026, 10:29 AM
Package URL
pkg:socket/skills-sh/Dokhacgiakhoa%2Fantigravity-ide%2Fagent-clickhouse-io%2F@3fc3becf5fdffd99678fb03dc2d9fdb415e0a2fc