OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
This skill facilitates the integration of the Neon JS SDK into projects. While functionally helpful, it relies on external setup guides and code generation rules fetched from a third-party GitHub repository not on the trusted list. This creates a surface for indirect prompt injection, where an attacker compromising the external repository could influence the agent's behavior during the setup process.
Detected behaviors
No alerts
No issues
2/3 files flagged
Score: 93/100 · 2 sections analyzed