Neon

Neon serverless Postgres — manage projects, branches, databases, roles, endpoints, and compute via the Neon API. Create database branches for development, ma...

This skill largely does what it says — it calls Neon API endpoints and requires NEON_API_KEY. Before installing, consider: - Provide NEON_API_KEY explicitly in the agent environment rather than relying on a workspace .env file. The script will attempt to read WORKSPACE/.env or ~/.openclaw/workspace/.env to find the key if the env var is absent. If that file contains other secrets, decide whether you want the skill to be able to read it. - SKILL.md does not disclose that it reads a .env file or the WORKSPACE env var; ask the author to document this behavior or remove the fallback if you prefer stricter privacy. - Verify the author/source (homepage and GitHub links in SKILL.md) and confirm the API_BASE (https://console.neon.tech) matches your expectations for Neon. If you plan to allow autonomous agent use, consider running the skill in an isolated environment or limiting the NEON_API_KEY scope (least privilege) in Neon. If you want me to, I can: (a) point out the exact lines that read the .env file, (b) suggest a minimal code change to remove the fallback file read, or (c) draft questions to ask the skill author for clarification.

Type: OpenClaw Skill Name: neon Version: 1.0.0 The skill provides a CLI for managing Neon serverless Postgres via its official API (console.neon.tech). While the implementation in `scripts/neon.py` appears to contain logic errors—specifically, it fails to process the JSON payloads passed as command-line arguments—it does not exhibit any signs of malicious intent, data exfiltration, or unauthorized access beyond its stated purpose.