neon-auth

Pass

Audited by Gen Agent Trust Hub on Oct 31, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches configuration and instructions from the vendor's official documentation site and installs required libraries from the NPM registry.\n
  • Official documentation: https://neon.com/docs/ links for guides, roadmaps, and quickstarts.\n
  • Package registry: Installs @neon/auth, better-auth, and @better-auth-ui/react via standard package managers.\n- [COMMAND_EXECUTION]: Utilizes the neon CLI for project deployment, authentication status checks, and managing trusted domains.\n
  • Deployment: neon deploy and neon deploy --env <file> for environment configuration.\n
  • Auth Management: neon neon-auth enable, status, and oauth-provider commands.\n
  • Domain Management: neon neon-auth domain add/list/delete for origin allowlisting.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests user requirements and existing application code to provide tailored authentication implementation, representing a standard interaction surface.\n
  • Ingestion points: User requests for authentication features ("add auth", "add login") and existing project identity state.\n
  • Boundary markers: Includes instructions to inventory existing methods and confirm environmental constraints (e.g., AWS region, networking settings) before provisioning.\n
  • Capability inventory: CLI execution (neon commands) and file-writing capabilities for generating configuration and router files.\n
  • Sanitization: Employs standardized code templates and structured configuration via defineConfig.\n- [SAFE]: The skill exclusively uses resources from the author and well-known, trusted technology providers, following industry-standard development and security practices for secret management and identity routing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 31, 2026, 08:59 PM