neon-postgres

Pass

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references documentation and configuration files from 'neon.com', which is a well-known and trusted service for Postgres hosting.
  • [COMMAND_EXECUTION]: Provides instructions to initialize the Neon CLI using 'npx -y neonctl@latest init --agent', which is a standard method for setting up developer tools from a known vendor.
  • [SAFE]: Includes explicit security reminders to use environment variables for database credentials and never commit '.env' files to version control.
  • [EXTERNAL_DOWNLOADS]: References a secondary skill file from 'https://neon.com/docs/ai/skills/neon-postgres-branches/SKILL.md', which is hosted on the official vendor domain.
  • [COMMAND_EXECUTION]: Instructions involve installing official packages like '@neondatabase/config' and '@neondatabase/env' from the public NPM registry, which are standard library dependencies for the vendor.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 8, 2026, 06:55 AM
Security Audit — agent-trust-hub — neon-postgres