neon-single-node
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily documentation and troubleshooting data intended to help an AI agent assist users with Neon database deployments.
- [SAFE]: The instructions promote security best practices, such as using SCRAM-SHA-256 verifiers instead of plaintext passwords and managing credentials through environment variables rather than hardcoding them.
- [SAFE]: The dependencies mentioned, including Docker images from the official Neondatabase GHCR registry and standard Linux packages (rclone, postgresql-client), are consistent with the skill's stated purpose.
- [SAFE]: No patterns of prompt injection, obfuscation, persistence, or malicious privilege escalation were found. The technical details regarding file permissions (e.g., chown 1000:1000) and shell usage (e.g., SSH tunnels) are focused on resolving specific deployment issues described in the failure catalogue.
Audit Metadata