claimable-postgres

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches database configuration, connection strings, and status updates from Neon's official API endpoints at https://neon.new/api/v1/database.
  • [COMMAND_EXECUTION]: The skill executes shell commands including npx, npm, and psql to provision resources, install dependencies, and run database initialization scripts.
  • [REMOTE_CODE_EXECUTION]: The skill utilizes npx neon-new@latest to dynamically download and execute the official provisioning utility from the npm registry.
  • [CREDENTIALS_UNSAFE]: While the skill manages sensitive DATABASE_URL connection strings by writing them to .env files, it follows security best practices by instructing the agent to verify .gitignore coverage to prevent accidental exposure.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 09:29 AM
Security Audit — agent-trust-hub — claimable-postgres