chore(deps): update clickhouse/agent-skills digest to c7f9095

[renovate]

This PR contains the following updates:

Package	Update	Change
ClickHouse/agent-skills	digest	d284161 → c7f9095

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🛡️ Skill Security Scan Results

✅ chdb-datastore

• Status: Passed
• Findings: 4
• Allowed (not blocking): 1
  • SECRET_CONNECTION_STRING (Allowed: The skill's documentation contains an example mysql://user:password@host:3306/dbname connection-string shape illustrating how to connect chDB to external MySQL sources. The value is not a real credential — it's an illustrative string in markdown.)

✅ chdb-sql

• Status: Passed
• Findings: 4

✅ clickhouse-architecture-advisor

• Status: Passed
• Findings: 2

✅ clickhouse-best-practices

• Status: Passed
• Findings: 2

✅ clickhousectl-cloud-deploy

• Status: Passed
• Findings: 5
• Allowed (not blocking): 1
  • PIPELINE_TAINT_FLOW (Allowed: The skill's prerequisites cite the official ClickHouse CLI installer curl -fsSL https://clickhouse.com/cli | sh as a documented install step. The destination is ClickHouse's own site.)

❌ clickhousectl-local-dev

• Status: Failed
• Findings: 5
• Blocking: 1

Blocking issues:

• [ATR_MCP_MALICIOUS_RESPONSE] (CRITICAL) Pattern detected: curl -fsSL https://clickhouse.com/cli | sh (SKILL.md:27)

Allowlisted (not blocking):

• PIPELINE_TAINT_FLOW (Allowed: The skill's prerequisites cite the official ClickHouse CLI installer curl -fsSL https://clickhouse.com/cli | sh as a documented install step. The destination is ClickHouse's own site.)

---

Summary: Scanned 6 skill(s), found 1 blocking issue(s).

⚠️ Action Required: Review the blocking findings. Add a justified entry to the skill's security.allowed_issues[] in its spec.yaml if the finding is a false positive.