neon-functions
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents handling of untrusted data from HTTP requests. Ingestion points: Request bodies in src/index.ts. Boundary markers: Recommended JWT verification and CORS headers. Capability inventory: Access to database and object storage. Sanitization: Use of Zod schemas for input validation.
- [REMOTE_CODE_EXECUTION]: Deployment of code to Neon via the neon CLI is a platform-standard feature described for development purposes.
- [COMMAND_EXECUTION]: The instructions include standard Neon CLI commands for managing infrastructure.
- [DATA_EXPOSURE]: The skill uses platform-injected environment variables like DATABASE_URL following secure connectivity patterns.
Audit Metadata