by 安全扫描
OpenClaw
安全
high confidenceThe skill is an instruction-only wrapper for the official neonctl CLI and its requirements and instructions are consistent with managing Neon Serverless Postgres via that tool.
评估建议
This skill is essentially documentation for using the neonctl CLI. Before installing or using it: 1) Confirm you trust the neonctl npm package (look at the npm page, maintainer, and version). 2) Be aware that global npm installs can run code during installation — consider installing in a controlled environment or using a container. 3) Only provide API keys when required and store them securely; the skill itself does not request secrets but the CLI will need authentication to act on your Neon acc...详细分析 ▾
✓ 用途与能力
Name, description, and provided commands all align with Neon/neonctl functionality (projects, branches, databases, roles, endpoints, connection strings). There are no unrelated binaries, env vars, or config paths requested.
✓ 指令范围
SKILL.md only documents installing neonctl, authenticating with neonctl, and running neonctl commands (with --output json recommended). It does not instruct reading unrelated files, scanning system state, or exfiltrating data.
ℹ 安装机制
There is no formal install spec in the registry (instruction-only), but SKILL.md recommends `npm i -g neonctl`. Global npm installs are common for CLIs but run package install scripts — verify the neonctl package source and review npm package metadata before installing.
✓ 凭证需求
The skill declares no required environment variables or credentials. The documented CLI supports an --api-key flag, which is expected and proportional for a cloud DB management tool.
✓ 持久化与权限
Skill is not always-enabled; it is user-invocable and allows normal autonomous invocation. It does not request system-wide persistence or modify other skills' configs.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/10
Initial release of the neon CLI management skill. - Provides commands for managing Neon Serverless Postgres projects, branches, databases, roles, endpoints, and connection strings via CLI. - Offers authentication, context setting, and support for JSON output for programmatic use. - Details individual commands and global flags for comprehensive Neon database management from the command line.
● 无害
安装命令
点击复制官方npx clawhub@latest install cli-neon
镜像加速npx clawhub@latest install cli-neon --registry https://cn.longxiaskill.com