neon-auth-react
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate instructions for setting up authentication using the
@neondatabase/authlibrary. - [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the official vendor package
@neondatabase/authvia npm. This is a standard and safe operation for a library integration skill. - [COMMAND_EXECUTION]: Includes standard bash commands for package installation (
npm install @neondatabase/auth) and SQL examples for database permissions. These are documented for the user to execute manually and do not involve automated or suspicious command execution. - [CREDENTIALS_UNSAFE]: No hardcoded secrets were detected. The skill correctly demonstrates the use of environment variables (
import.meta.env.VITE_AUTH_URL) for configuration, which is a security best practice. - [DATA_EXFILTRATION]: No patterns of sensitive data access or exfiltration to untrusted domains were found. Network operations (e.g.,
fetchfor API calls) are demonstrated for legitimate application logic like fetching data from the user's own API. - [INDIRECT_PROMPT_INJECTION]: The skill handles authentication UI and logic. While it processes user profile data (name, email), it does not involve patterns where untrusted external data is interpolated into agent prompts in a way that could cause injection.
Audit Metadata