api-baas-neon
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive guide for interacting with Neon's serverless database infrastructure. All referenced external resources, such as the
neonctlCLI and the@neondatabase/serverlessdriver, are official tools provided by Neon, an established database service. - [CREDENTIALS_UNSAFE]: While static analysis flagged potential hardcoded credentials in
reference.md, manual review confirms these are generic connection string templates using placeholders like[user]:[password]for instructional purposes. No actual credentials or environment secrets are exposed within the skill files. - [PROMPT_INJECTION]: No evidence of prompt injection, jailbreak attempts, or safety filter bypasses was found. The skill explicitly warns against security risks such as using
sql.unsafe()with untrusted data, promoting the use of safe, parameterized tagged templates instead. - [EXTERNAL_DOWNLOADS]: The skill mentions official dependencies like the
@neondatabase/serverlesspackage and Neon's GitHub Actions (neondatabase/create-branch-action). These are well-known, trusted resources required for the skill's stated purpose.
Audit Metadata