neon-instagres
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the
get-dbpackage from the npm registry during execution. - [REMOTE_CODE_EXECUTION]: Triggers the execution of the
get-dbutility vianpxwith the--yesflag to bypass installation prompts. - [COMMAND_EXECUTION]: Executes shell commands to search for existing database credentials and to write new connection details to project environment files.
- [DATA_EXFILTRATION]: Accesses the project's
.envfile to check for existingDATABASE_URLvariables. This operation is used to prevent accidental overwriting of existing database configurations.
Audit Metadata