claimable-postgres
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches database configuration, connection strings, and status updates from Neon's official API endpoints at
https://neon.new/api/v1/database. - [COMMAND_EXECUTION]: The skill executes shell commands including
npx,npm, andpsqlto provision resources, install dependencies, and run database initialization scripts. - [REMOTE_CODE_EXECUTION]: The skill utilizes
npx neon-new@latestto dynamically download and execute the official provisioning utility from the npm registry. - [CREDENTIALS_UNSAFE]: While the skill manages sensitive
DATABASE_URLconnection strings by writing them to.envfiles, it follows security best practices by instructing the agent to verify.gitignorecoverage to prevent accidental exposure.
Audit Metadata