neon-vercel-postgres
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill contains instructions for the AI on when to trigger and which resources to load based on user queries. These are standard operational parameters for the skill and do not attempt to bypass safety filters or override system constraints.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing several well-known and trusted Node.js packages including @neondatabase/serverless, @vercel/postgres, drizzle-orm, and prisma. These packages are from established organizations (Neon, Vercel, Prisma) and are standard tools for database integration in serverless environments.
- [COMMAND_EXECUTION]: The skill provides scripts and command-line examples for database setup (setup-neon.sh), connection testing (test-connection.ts), and ORM management (drizzle-kit, prisma). These tools are intended for use by the developer to manage their own infrastructure and follow industry standard practices for database development.
- [SAFE]: The skill demonstrates strong security awareness by explicitly documenting risks such as SQL injection and providing specific, corrected patterns (e.g., mandatory use of template tag syntax) to mitigate these risks. It also provides guidance on secure credential management using environment variables.
Audit Metadata