api-database-vercel-postgres
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive guidance on preventing SQL injection by mandating the use of tagged template literals (
sql```) and explicitly warning against unsafe string interpolation.- **[SAFE]:** Proper resource management is enforced through instructions on releasing clients and managing connection pools, which prevents potential denial-of-service scenarios caused by connection exhaustion.- **[SAFE]:** The documentation correctly distinguishes between pooled and direct connection strings (POSTGRES_URLvsPOSTGRES_URL_NON_POOLING), ensuring that features requiring session-level consistency are handled over appropriate connections.- **[SAFE]:** Guidance for migrating to the@neondatabase/serverless` package is provided using standard, well-known libraries and official environment variable patterns.
Audit Metadata