claimable-postgres
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the
neon-newCLI,@neon/config, andvite-plugin-neon-newfrom the NPM registry and interacts with theneon.newAPI. - [REMOTE_CODE_EXECUTION]: Executes the
neon-newCLI tool vianpx. The skill provides explicit safety instructions for the agent to verify the package and its settings before running. - [COMMAND_EXECUTION]: Employs
curlfor API requests,npxfor package execution, andpsqlfor database connectivity and seeding tasks. - [DYNAMIC_EXECUTION]: Performs dynamic code execution through the
npxrunner and supports SDK-based programmatic imports. - [INDIRECT_PROMPT_INJECTION]: Handles external data from API responses and user-supplied SQL scripts. The skill includes rigorous guidelines for the agent to verify targets, inspect SQL, and manage environment variables safely.
Audit Metadata