neon-postgres
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOW
Full Analysis
- SAFE (SAFE): No malicious patterns, obfuscation, or unauthorized data exfiltration attempts were detected. The skill consists of instructional content and code snippets for a well-known database service.
- External Dependencies (INFO): The skill references official Node.js packages and GitHub Actions including
@neondatabase/serverless,neonctl, andneondatabase/create-branch-action. These are standard tools for the Neon ecosystem. - Data Ingestion Surface (INFO): As a database tool, the skill naturally involves data ingestion. However, it follows security best practices by documenting the use of parameterized template literals to prevent injection vulnerabilities.
- Credential Security (INFO): Connection string examples use clear placeholders (e.g., 'user:password', 'ep-xxx') rather than exposing real credentials.
Audit Metadata