📦 Neon Database Complete Documentation — 无服务器Postgres文档
v0.1.0Neon官方完整文档，涵盖无服务器Postgres的零配置分支、自动扩缩容、Vercel/Drizzle/Prisma集成、连接池、扩展插件与最佳实践，帮助开发者快速构建可弹性伸缩的数据层。
2· 2.7k·0 当前·0 累计
by 安全扫描
OpenClaw
安全
high confidenceThis package is an instruction-only documentation skill containing a large dump of Neon database docs — its declared metadata, files, and requirements are coherent with that purpose.
评估建议
This skill appears to be a straightforward copy of Neon’s public documentation and is internally consistent. Before installing or enabling autonomous use: 1) Do not allow the agent to auto-execute any example commands — the package itself warns against it. 2) Never paste production secrets (NEON_API_KEY, DATABASE_URL, OPENAI_API_KEY, etc.) into prompts or request the skill to 'use' them without explicit, deliberate action. 3) If you plan to let an agent act autonomously with this skill, restrict...详细分析 ▾
✓ 用途与能力
Name/description describe Neon Serverless Postgres docs and the package contains ~546 markdown docs from Neon. There are no unexpected required binaries, env vars, or install steps; the single JS file is a small shared-content helper. The requested footprint matches a documentation-only skill.
ℹ 指令范围
SKILL.md and the included documentation are reference material. Many docs include example commands and examples that reference env vars (DATABASE_URL, NEON_API_KEY, OPENAI_API_KEY) and curl/neonctl usage — which is normal for documentation. The SKILL.md includes an explicit Security Notice warning agents not to auto-execute commands, which mitigates accidental autonomous execution. Still, if an agent were to run examples automatically, they could cause side effects — treat the examples as inert unless you explicitly run them.
✓ 安装机制
No install spec; this is instruction-only with files bundled in the skill. Nothing is downloaded or extracted at install time, so install risk is low.
ℹ 凭证需求
The skill declares no required credentials or config paths (none listed). However, many documentation pages show sample commands that expect API keys or connection strings. Those examples are expected in docs but are not required by the skill itself — do not provide secrets to the skill just because the docs show them.
✓ 持久化与权限
always is false and disable-model-invocation is false (normal). The skill does not request to persist credentials or edit other skills. Autonomous invocation is allowed by default; this is typical for skills but combine caution with the instruction-scope note above.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.02026/2/7
- Initial release of Neon Database skill, providing complete serverless Postgres documentation. - Includes 546 markdown files (6.8MB) covering setup, branching, autoscaling, integrations (Vercel, Drizzle, Prisma, Next.js), connection pooling, data import, extensions, and security. - Features step-by-step guides, API/CLI reference, and best practices. - Integrates documentation for authentication providers and AI/ML features (pgvector). - Security notice: command examples require explicit user approval before execution.
● 可疑
安装命令
点击复制官方npx clawhub@latest install lb-neon-skill
镜像加速npx clawhub@latest install lb-neon-skill --registry https://cn.longxiaskill.com