neon-realtime
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Recommends the use of the
neonCLI tool for managing skills and configuration (e.g.,neon skills,neon deploy). These are standard operations for the vendor's platform. - [EXTERNAL_DOWNLOADS]: References and installs packages from official registries like NPM (e.g.,
@neon/realtime,drizzle-orm) and fetches documentation from the vendor's GitHub repository and official domain (neon.com). - [INDIRECT_PROMPT_INJECTION]: The skill processes database rows as untrusted input. Evidence: 1. Ingestion:
c.req.json()and database query results. 2. Boundaries: Uses query sealing to restrict client access. 3. Capabilities: Database read/write via Drizzle/Realtime SDK. 4. Sanitization: Instructions demonstrate SQL parameterization for safe data handling.
Audit Metadata