The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill uses npx get-db to download and run the official database provisioning utility from the npm registry.
[COMMAND_EXECUTION]: The skill employs Bash to execute setup commands, verify environment variables, and install database-related packages like dotenv and postgres.
[CREDENTIALS_UNSAFE]: The skill reads from and writes to .env files to store DATABASE_URL credentials. While this involves sensitive data, it follows industry standard practice for local secret management and instructs the user to ignore these files in version control.
[INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect injection as it processes untrusted data from local files (e.g., schema.sql) and environment variables. (1) Ingestion points: Reads from .env and processes external SQL files. (2) Boundary markers: Absent. (3) Capability inventory: Full shell access via Bash, file read/write, and package execution. (4) Sanitization: None detected. However, the risk is minimal given the specialized scope of database provisioning.

neon-instagres