Neon

Neon serverless Postgres — manage projects, branches, databases, roles, endpoints, and compute via the Neon API. Create database branches for development, ma...

Security Scan

The skill is mostly what it claims (a Neon API CLI) but its runtime code reads a workspace .env file (and the WORKSPACE env var) without declaring that behavior, which is an inconsistency worth reviewing before install.

Purpose & Capability

Name, description, and implemented operations align: the script makes HTTP calls to Neon API endpoints and exposes project/branch/database/role/endpoint/consumption operations. Requiring NEON_API_KEY is appropriate for this purpose.

Instruction Scope

SKILL.md claims 'never stores data locally' and declares only NEON_API_KEY, but the script's get_token() will attempt to read a .env file at WORKSPACE/.env or ~/.openclaw/workspace/.env to retrieve NEON_API_KEY. The SKILL.md does not document this file read or the use of the WORKSPACE env var. Reading user files (even only to find a token) is scope creep relative to the declared behavior and should be disclosed.

Install Mechanism

No install spec; the skill is instruction/code-only and uses only Python stdlib (no external downloads or package installs). This is low risk from an install mechanism perspective.

Credentials

The only required credential is NEON_API_KEY (declared as primary), which is proportionate. However, the script also reads the WORKSPACE environment variable (to locate a .env file) and will read ~/.openclaw/workspace/.env if present. Those env/config path usages are not declared in metadata and could cause the skill to access files the user did not expect.

Persistence & Privilege

always is false and the skill does not request persistent installation or system-wide config changes. It does not modify other skills or system settings. Autonomous invocation remains allowed (platform default).

What to consider before installing

This skill largely does what it says — it calls Neon API endpoints and requires NEON_API_KEY. Before installing, consider: - Provide NEON_API_KEY explicitly in the agent environment rather than relying on a workspace .env file. The script will attempt to read WORKSPACE/.env or ~/.openclaw/workspace/.env to find the key if the env var is absent. If that file contains other secrets, decide whether you want the skill to be able to read it. - SKILL.md does not disclose that it reads a .env file or the WORKSPACE env var; ask the author to document this behavior or remove the fallback if you prefer stricter privacy. - Verify the author/source (homepage and GitHub links in SKILL.md) and confirm the API_BASE (https://console.neon.tech) matches your expectations for Neon. If you plan to allow autonomous agent use, consider running the skill in an isolated environment or limiting the NEON_API_KEY scope (least privilege) in Neon. If you want me to, I can: (a) point out the exact lines that read the .env file, (b) suggest a minimal code change to remove the fallback file read, or (c) draft questions to ask the skill author for clarification.

Neon serverless Postgres — manage projects, branches, databases, roles, endpoints, and compute via the Neon API.

Features

• Project management — create, list, delete projects
• Branch management — create, restore, delete branches
• Database operations — create and manage databases
• Role management — database users and permissions
• Endpoint management — connection endpoints and pooling
• Compute scaling — auto-suspend, compute size control
• Connection strings — generate connection URIs
• Operations history — track async operations
• Consumption metrics — compute hours, storage, transfer
• Branch restore — point-in-time restore from history

Requirements

Variable	Required	Description
NEON_API_KEY	✅	API key/token for Neon

Quick Start

# List projects
python3 {baseDir}/scripts/neon.py projects --limit 20

# Get project details
python3 {baseDir}/scripts/neon.py project-get proj-abc123

# Create a project
python3 {baseDir}/scripts/neon.py project-create '{"project":{"name":"my-app","region_id":"aws-us-east-1"}}'

# Delete a project
python3 {baseDir}/scripts/neon.py project-delete proj-abc123

Commands

projects

List projects.

python3 {baseDir}/scripts/neon.py projects --limit 20

project-get

Get project details.

python3 {baseDir}/scripts/neon.py project-get proj-abc123

project-create

Create a project.

python3 {baseDir}/scripts/neon.py project-create '{"project":{"name":"my-app","region_id":"aws-us-east-1"}}'

project-delete

Delete a project.

python3 {baseDir}/scripts/neon.py project-delete proj-abc123

branches

List branches.

python3 {baseDir}/scripts/neon.py branches --project proj-abc123

branch-create

Create a branch.

python3 {baseDir}/scripts/neon.py branch-create --project proj-abc123 '{"branch":{"name":"dev","parent_id":"br-main"}}'

branch-delete

Delete a branch.

python3 {baseDir}/scripts/neon.py branch-delete --project proj-abc123 br-dev

branch-restore

Restore branch to point in time.

python3 {baseDir}/scripts/neon.py branch-restore --project proj-abc123 br-main --timestamp '2026-02-01T00:00:00Z'

databases

List databases.

python3 {baseDir}/scripts/neon.py databases --project proj-abc123 --branch br-main

database-create

Create database.

python3 {baseDir}/scripts/neon.py database-create --project proj-abc123 --branch br-main '{"database":{"name":"mydb","owner_name":"neondb_owner"}}'

roles

List roles.

python3 {baseDir}/scripts/neon.py roles --project proj-abc123 --branch br-main

endpoints

List endpoints.

python3 {baseDir}/scripts/neon.py endpoints --project proj-abc123

connection-string

Get connection string.

python3 {baseDir}/scripts/neon.py connection-string --project proj-abc123 --branch br-main --database mydb

consumption

Get consumption metrics.

python3 {baseDir}/scripts/neon.py consumption --from 2026-01-01 --to 2026-02-01

operations

List operations.

python3 {baseDir}/scripts/neon.py operations --project proj-abc123 --limit 10

Output Format

All commands output JSON by default. Add --human for readable formatted output.

# JSON (default, for programmatic use)
python3 {baseDir}/scripts/neon.py projects --limit 5

# Human-readable
python3 {baseDir}/scripts/neon.py projects --limit 5 --human

Script Reference

Script	Description
{baseDir}/scripts/neon.py	Main CLI — all Neon operations

Data Policy

This skill never stores data locally. All requests go directly to the Neon API and results are returned to stdout. Your data stays on Neon servers.

Credits

---

Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.

📅 Need help setting up OpenClaw for your business? Book a free consultation