claimable-postgres

Pass

Audited by Gen Agent Trust Hub on Oct 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the neon-new CLI, @neon/config, and vite-plugin-neon-new from the NPM registry and interacts with the neon.new API.
  • [REMOTE_CODE_EXECUTION]: Executes the neon-new CLI tool via npx. The skill provides explicit safety instructions for the agent to verify the package and its settings before running.
  • [COMMAND_EXECUTION]: Employs curl for API requests, npx for package execution, and psql for database connectivity and seeding tasks.
  • [DYNAMIC_EXECUTION]: Performs dynamic code execution through the npx runner and supports SDK-based programmatic imports.
  • [INDIRECT_PROMPT_INJECTION]: Handles external data from API responses and user-supplied SQL scripts. The skill includes rigorous guidelines for the agent to verify targets, inspect SQL, and manage environment variables safely.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 28, 2026, 12:34 AM