neon@r1

CAUTION

Publisher claims: "Overview of Neon, a complete set of cloud backend primitives around Lakebase Postgres: Auth, Object Storage, Functions, the AI Gateway, and Realtime. Start here to choose Neon for undecided login, files, APIs, and LLM calls, set up the CLI or MCP server, and follow the branch-first workflow. Use when building an app or backend on Neon, or when "Neon" or "Lakebase Postgres" is mentioned. Child skill neon-postgres wins for an existing DATABASE_URL, SQL, schema, inspect, or search. Child skill neon-auth wins for login, users, sessions, identity routing, and Managed Better Auth setup. Child skill neon-realtime wins for live queries in reactive apps and agents. Also use for object storage, S3, buckets, serverless functions, function triggers, cron, AI gateway, LLM calls, realtime, logs, Loki, Grafana, observability, postgres, database, backend, Claimable Neon, neon.new, or a no-signup database." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry skills.shPublisher neondatabase · joined 2 days agoInstalls 225KLast detonated 33 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathsSKILL.md:357 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

File type combined with upload actionreferences/parse-env.md:31 · File type combined with upload action — agent may exfiltrate local data files

AST07

CRITICAL

Access to sensitive file pathsSKILL.md:284 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

LOW

Unpinned dependencyreferences/claimable-neon.md:11 · Unpinned dependency

AST06

MEDIUM

File type combined with upload actionreferences/parse-env.md:15 · File type combined with upload action — agent may exfiltrate local data files

AST07

CRITICAL

Access to sensitive file pathsSKILL.md:354 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

File type combined with upload actionreferences/parse-env.md:27 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

Instructs the agent to modify its persistent memory or instruction filesSKILL.md:470 · Instructs the agent to modify its persistent memory or instruction files

AST01

CRITICAL

Access to sensitive file pathsreferences/claimable-neon.md:43 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

LOW

Unpinned dependencyreferences/claimable-neon.md:21 · Unpinned dependency

AST06