Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent Neon/Postgres cost-optimization guide, but users should review the optional infrastructure changes before applying them.
Install only if you want Neon/Postgres cost and egress optimization help. Before allowing an agent to run SQL resets, create extensions, install @neon/config, or run neon config apply, confirm the target database or Neon branch and review the resulting config; the optional ttl setting can expire future ephemeral branches.
The activation condition includes general code-review phrasing ('reviewing query patterns for cost efficiency') that is broader than the named purpose of Neon Postgres egress optimization. Overbroad routing can cause the skill to activate in contexts where it is not the best fit, increasing the chance it suggests unnecessary database or infrastructure changes during ordinary review tasks.
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
FIRST: Use the parent neon skill for a Neon overview, getting started with Neon, Neon development best practices, and more.
If the neon skill is not installed, fetch it from https://neon.com/docs/ai/skills/neon/SKILL.md or install it with:
neon skills -s neon -y
The skill’s scope expands from diagnosing Postgres egress to recommending and applying broader Neon infrastructure cost controls in neon.ts. This increases the capability surface from analysis into environment configuration changes, which can cause unintended operational changes unrelated to the user’s original request and may be acted on with elevated trust because it appears in an optimization skill.
The documentation explicitly instructs applying infrastructure configuration changes (neon config apply) even though the skill is framed as an egress-optimization guide. In an agent context, actionable deployment commands can lead to unauthorized or accidental changes to Neon branches, broadening impact from advice to state-changing operations.
No suspicious patterns detected.