Most static alerts are false positives caused by Markdown backticks, code fences, official links, and standard process.env examples. Confirmed risks are unattended remote installation, cloud-changing Neon CLI commands, and instructions to inspect .env files containing database credentials. No prompt injection or exfiltration intent was found.
Offer to inspect existing connected Neon projects or create new ones using the Neon CLI or MCP serve
The skill directs npx with automatic confirmation to install and run the latest Neon CLI, which executes unpinned remote package code and initiates account authorization.
This installs the Neon extension (for Cursor/VS Code) or MCP server (for other agents), creates an A
The described init operation installs integrations, creates an API key, and changes project configuration, giving the external command security-sensitive side effects.
Use this for local development enablement with `npx -y neon@latest init --agent <agent-name>`, VSCod
The recommended npx setup runs the latest Neon package and configures development integrations, which executes remote code and changes agent configuration.
The only static finding is a documentation reference to DATABASE_URL in SKILL.md. I treated it as a false positive because the skill does not access environment variables, request secrets, or include code that could exfiltrate credentials. No prompt injection or other semantic security issues were found.
The only static finding is a documentation reference to DATABASE_URL in SKILL.md. I treated it as a false positive because the skill does not access environment variables, request secrets, or include code that could exfiltrate credentials. No prompt injection or other semantic security issues were found.
Static analysis flagged database connection string terminology and two weak cryptography patterns in SKILL.md. Review found documentation-only references to Neon connection URLs and PgBouncer, with no executable code, no credential collection, and no weak cryptographic implementation. No prompt injection attempt or data exfiltration behavior was found.
1
Files scanned
57
Lines analyzed
2
Review items
1
False positives ignored
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Database URL Terminology Requires Secret Handling Care
SKILL.md references DATABASE_URL and DIRECT_URL as connection string names for Prisma with Neon. This is legitimate database setup guidance, but users should avoid pasting real credentials into prompts or shared logs.
The lines describe expected environment variable names for Neon and Prisma, not code that reads or transmits secrets. The remaining concern is user handling of database credentials.
Static false positives ignored (1)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Static analysis flagged weak cryptography at the skill description and PgBouncer guidance. The referenced lines contain product and connection pooling text, not hashing, encryption, or cryptographic API usage.
The cited lines contain plain documentation text and no code path. There is no evidence of MD5, SHA1, DES, or other weak cryptographic operations.
Static analysis flagged 4 patterns that are all false positives. The skill contains documentation-only content with no executable code. Environment variable references are configuration examples, not actual env access. Cryptographic algorithm warnings are pattern-matching errors on unrelated text.
1
Files scanned
61
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.