using-neon
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch documentation and an index file (
llms.txt) from neon.com usingcurl. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves processing external documentation, which constitutes a potential attack surface for indirect prompt injection.
- Ingestion points: Network requests to
https://neon.com/llms.txtand specific documentation paths underhttps://neon.com/docs/. - Boundary markers: None specified for the ingested content.
- Capability inventory: The skill utilizes
curlfor network operations to retrieve documentation. - Sanitization: No explicit sanitization or validation of the fetched markdown content is performed before it enters the agent's context.
Audit Metadata