neon-postgres
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation in markdown format from official sources.
- Fetches documentation from
https://neon.com/docs/introduction/branching.mdandhttps://neon.com/docs/llms.txtto provide up-to-date context. - [REMOTE_CODE_EXECUTION]: The skill instructs the agent to install and execute official tools and extensions.
- Executes
npx -y neonctl@latest init --agent <agent-name>to set up the Neon CLI. - Executes
npx -y add-mcp https://mcp.neon.tech/mcpto install the official Model Context Protocol (MCP) server. - Executes
npx skills add neondatabase/agent-skills --skill neon-postgres-branchesto install additional skill components from the official repository. - Installs the extension
databricks.neon-local-connectfor local development workflows. - [COMMAND_EXECUTION]: The skill utilizes shell commands for environment setup and package management.
- Uses
npm iandnpm installfor official packages such as@neondatabase/configand@neondatabase/env. - Interacts with local
.envfiles to manageDATABASE_URLcredentials, which is a standard and recommended practice. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection due to its reliance on external data.
- Ingestion points: Reads markdown content from external URLs at
neon.comandgithub.com(SKILL.md) to provide current documentation. - Boundary markers: The skill advises verifying claims against official docs but does not specify explicit delimiters for the fetched content within the agent's internal prompt context.
- Capability inventory: The skill has capabilities to execute shell commands (
npx), write to files (.env), and perform network operations (curl). - Sanitization: There is no explicit sanitization of the fetched markdown text before it is processed by the agent.
Audit Metadata