Neon Postgres

Guides and best practices for working with Neon Serverless Postgres. Covers getting started, local development with Neon, choosing a connection method, Neon...

This skill is a documentation/help helper and appears coherent. Before using it, be aware it will fetch pages from neon.com (network access). Do not paste your Neon connection strings, API keys, or other secrets into conversations unless you trust the skill and understand where those secrets will be sent/stored. If you plan to run commands the skill suggests (neonctl, npx, or SDK usage), run them locally in a safe environment and only provide credentials to official Neon tooling or well-reviewed code. If you want an extra safety check, review any fetched doc URLs yourself in a browser rather than letting the agent retrieve them automatically.

Type: OpenClaw Skill Name: neon-postgres Version: 1.0.0 The `SKILL.md` file instructs the AI agent to fetch documentation from `neon.com` using `curl` commands. While the stated purpose is benign (retrieving documentation), the explicit instruction to execute `curl` for external content introduces a potential command injection vulnerability. If the agent's input could be manipulated to fetch from an arbitrary URL, or if the `neon.com` domain were compromised, this capability could be abused for unauthorized data retrieval or execution. This is a risky capability without clear malicious intent.