neon-auth
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches configuration and instructions from the vendor's official documentation site and installs required libraries from the NPM registry.\n
- Official documentation:
https://neon.com/docs/links for guides, roadmaps, and quickstarts.\n - Package registry: Installs
@neon/auth,better-auth, and@better-auth-ui/reactvia standard package managers.\n- [COMMAND_EXECUTION]: Utilizes theneonCLI for project deployment, authentication status checks, and managing trusted domains.\n - Deployment:
neon deployandneon deploy --env <file>for environment configuration.\n - Auth Management:
neon neon-auth enable,status, andoauth-providercommands.\n - Domain Management:
neon neon-auth domain add/list/deletefor origin allowlisting.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests user requirements and existing application code to provide tailored authentication implementation, representing a standard interaction surface.\n - Ingestion points: User requests for authentication features ("add auth", "add login") and existing project identity state.\n
- Boundary markers: Includes instructions to inventory existing methods and confirm environmental constraints (e.g., AWS region, networking settings) before provisioning.\n
- Capability inventory: CLI execution (
neoncommands) and file-writing capabilities for generating configuration and router files.\n - Sanitization: Employs standardized code templates and structured configuration via
defineConfig.\n- [SAFE]: The skill exclusively uses resources from the author and well-known, trusted technology providers, following industry-standard development and security practices for secret management and identity routing.
Audit Metadata