using-neon
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches official documentation and resource indices from the
neon.techdomain usingcurlto ensure the agent has access to current information. - [REMOTE_CODE_EXECUTION]: Instructions are provided for installing the official Neon CLI via a remote script (
https://neon.tech/install.sh | bash) and for setting up local environments usingnpx neon init. These are standard installation methods for the service. - [COMMAND_EXECUTION]: The skill guides the agent to perform management tasks using the Neon CLI (
neonctl),curlfor API interactions, and various ORM-specific CLI tools (e.g.,drizzle-kit). - [INDIRECT_PROMPT_INJECTION]: The skill provides a mechanism to ingest external documentation fetched at runtime, which represents a potential attack surface.
- Ingestion points: Documentation URLs and the
llms.txtindex fetched viacurlinSKILL.mdandreferences/referencing-docs.md. - Boundary markers: None explicitly defined in the fetch commands.
- Capability inventory: The agent is authorized to execute shell commands (
curl,neonctl), write to local configuration files (.env), and perform network operations. - Sanitization: No specific sanitization or filtering of the fetched documentation is mentioned.
- [SAFE]: Recommendations for secret management, such as using
.envfiles and environment variables instead of hardcoding credentials, align with industry security standards.
Audit Metadata