using-neon
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches technical documentation and an index file (llms.txt) from Neon's official domain (neon.com). This is a well-known and trusted technology service.
- [COMMAND_EXECUTION]: Instructions provide curl commands for documentation retrieval, allowing the agent to fetch markdown content for its context.
- [PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection via external documentation ingestion.
- Ingestion points: External markdown files fetched from https://neon.com/docs/.
- Boundary markers: No explicit delimiters are suggested for the fetched content.
- Capability inventory: The skill is primarily instructional and does not define sensitive operations like file system writes or arbitrary execution.
- Sanitization: No sanitization is performed on the incoming documentation text.
Audit Metadata