Skip to main content

clickhouse-multi-env-setup

Configures ClickHouse for multiple environments with secrets management and infrastructure-as-code for efficient deployment.

Install this skill

or
23/100

Security score

The clickhouse-multi-env-setup skill was audited on May 30, 2026 and we found 33 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 88

Template literal with variable interpolation in command context

SourceSKILL.md
88if (!config) throw new Error(`Unknown environment: ${env}`);
medium line 92

Template literal with variable interpolation in command context

SourceSKILL.md
92if (!config.password) throw new Error(`CLICKHOUSE_PASSWORD not set for ${env}`);
medium line 94

Template literal with variable interpolation in command context

SourceSKILL.md
94throw new Error(`ClickHouse ${env} must use HTTPS`);
medium line 133

Template literal with variable interpolation in command context

SourceSKILL.md
133```bash
medium line 181

Template literal with variable interpolation in command context

SourceSKILL.md
181console.log(`Applying ${files.length} schema files to ${env}...`);
medium line 187

Template literal with variable interpolation in command context

SourceSKILL.md
187console.log(` [OK] ${file}`);
medium line 189

Template literal with variable interpolation in command context

SourceSKILL.md
189console.error(` [FAIL] ${file}: ${(err as Error).message}`);
medium line 204

Template literal with variable interpolation in command context

SourceSKILL.md
204throw new Error(`${operation} is blocked in production`);
medium line 218

Template literal with variable interpolation in command context

SourceSKILL.md
218const expected = `app_${env === 'development' ? 'dev' : env}`;
medium line 220

Template literal with variable interpolation in command context

SourceSKILL.md
220throw new Error(`Database mismatch: expected ${expected}, got ${database}`);
medium line 227

Template literal with variable interpolation in command context

SourceSKILL.md
227```yaml
low line 59

Access to .env file

SourceSKILL.md
59password: process.env.CLICKHOUSE_PASSWORD ?? 'dev_password',
low line 66

Access to .env file

SourceSKILL.md
66url: process.env.CLICKHOUSE_HOST ?? 'https://staging.clickhouse.cloud:8443',
low line 67

Access to .env file

SourceSKILL.md
67username: process.env.CLICKHOUSE_USER ?? 'app_staging',
low line 68

Access to .env file

SourceSKILL.md
68password: process.env.CLICKHOUSE_PASSWORD!,
low line 75

Access to .env file

SourceSKILL.md
75url: process.env.CLICKHOUSE_HOST!,
low line 76

Access to .env file

SourceSKILL.md
76username: process.env.CLICKHOUSE_USER!,
low line 77

Access to .env file

SourceSKILL.md
77password: process.env.CLICKHOUSE_PASSWORD!,
low line 86

Access to .env file

SourceSKILL.md
86const env = process.env.NODE_ENV ?? 'development';
low line 135

Access to .env file

SourceSKILL.md
135# .env.local (git-ignored)
low line 177

Access to .env file

SourceSKILL.md
177const env = process.env.NODE_ENV ?? 'development';
low line 203

Access to .env file

SourceSKILL.md
203if (process.env.NODE_ENV === 'production') {
low line 217

Access to .env file

SourceSKILL.md
217const env = process.env.NODE_ENV ?? 'development';
low line 57

External URL reference

SourceSKILL.md
57url: 'http://localhost:8123',
low line 66

External URL reference

SourceSKILL.md
66url: process.env.CLICKHOUSE_HOST ?? 'https://staging.clickhouse.cloud:8443',
low line 147

External URL reference

SourceSKILL.md
147--secret-string '{"host":"https://prod.clickhouse.cloud:8443","password":"..."}'
low line 155

External URL reference

SourceSKILL.md
155echo -n "https://prod.clickhouse.cloud:8443" | \
low line 162

External URL reference

SourceSKILL.md
162host="https://prod.clickhouse.cloud:8443" \
low line 270

External URL reference

SourceSKILL.md
270| TLS error in staging | Using `http://` for Cloud | Force `https://` in non-dev |
low line 276

External URL reference

SourceSKILL.md
276- [12-Factor App Config](https://12factor.net/config)
low line 277

External URL reference

SourceSKILL.md
277- [ClickHouse Cloud Console](https://clickhouse.cloud/)
low line 278

External URL reference

SourceSKILL.md
278- [AWS Secrets Manager](https://aws.amazon.com/secrets-manager/)
low line 279

External URL reference

SourceSKILL.md
279- [GCP Secret Manager](https://cloud.google.com/secret-manager)
Scanned on May 30, 2026
View Security Dashboard
Installation guide →