Skill audit report

neon-postgres Audit report.

Guides and best practices for working with Lakebase Postgres, the database behind Neon. Covers setup, connection methods and drivers, pooled vs direct connections, branching, schema migrations, autoscaling, scale-to-zero, instant restore, read replicas, connection pooling, IP allow lists, and logical replication. Also covers Lakebase Search: semantic vector search, full-text search with BM25 ranking, and hybrid search. Use when users ask about "Lakebase Postgres", "Neon setup", "connect to Neon", "Neon project", "DATABASE_URL", "serverless Postgres", "Neon CLI", "neon", "Neon MCP", "Neon Auth", "@neondatabase/serverless", "@neondatabase/neon-js", "scale to zero", "Neon autoscaling", "Neon read replica", "Neon connection pooling", "schema migrations", "database troubleshooting", "Postgres performance", "neon inspect db", "semantic search", "vector search", "full-text search", "BM25", or "hybrid search".

BLOCKED · BLOCKNeeds reviewGenerated Oct 21, 2026Heuristic metadata audit
69
Audit
58
Trust
63
Quality
68
Security
88
Maintain
92
Install

OpenAgentSkill Trust Score

58
Manual review

OpenAgentSkill Trust Score

The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.

GitHub adoption

WARN

48

86 GitHub stars

Stars/forks activity

WARN

48

86 stars, 16 forks; issue activity unavailable in current metadata

Recent maintenance

PASS

88

2mo since push

License clarity

PASS

86

Apache-2.0

README/SKILL.md completeness

PASS

86

Metadata includes enough usage and workflow context

Dependency/runtime risk

FAIL

28

command execution surface, credential or environment access

Install availability

PASS

92

npx skills add neondatabase/agent-skills --skill neon-postgres

Install command safety

PASS

92

standard package or runtime install path

Permission surface

FAIL

18

secrets or environment access, shell or command execution

Repository evidence

PASS

86

https://github.com/neondatabase/agent-skills/tree/main/plugins/neon-postgres/skills/neon-postgres

Review status

INFO

66

AI review data available

Agent Proven outcomes

INFO

54

No agent outcome data yet

Checks

Install and adoption review

6 Passed · 15 Needs review

Install path

92

PASS

npx skills add neondatabase/agent-skills --skill neon-postgres

Repository

88

PASS

https://github.com/neondatabase/agent-skills/tree/main/plugins/neon-postgres/skills/neon-postgres

License

86

PASS

Apache-2.0

Maintenance

88

PASS

2mo since push

AI review

55

CHECK

The SKILL.md excerpt is truncated, so the complete branching workflow and any final safety/operating-boundary sections are not fully verifiable.

README/SKILL.md completeness

86

PASS

Usable description available

Dependency risk

28

FIX

command execution surface, credential or environment access

Install command safety

92

PASS

standard package or runtime install path

Permission surface

18

FIX

secrets or environment access, shell or command execution

Stars/forks activity

48

FIX

86 stars, 16 forks; issue activity unavailable in current metadata

Adoption

68

INFO

86 GitHub stars

Warnings

  • Dependency or permission surface needs review
  • Permission surface may require sandboxing
  • The SKILL.md excerpt is truncated, so the complete branching workflow and any final safety/operating-boundary sections are not fully verifiable.
  • The skill depends on a parent `neon` skill for core instructions; if that skill is not installed, the agent may need extra fetch steps before this skill can be used effectively.
  • No explicit limitations or 'when not to use' guidance is present, which can lead to misuse in unsupported contexts.
  • Quality score needs review
  • Permission surface needs review: secrets or environment access, shell or command execution
  • GitHub adoption: 86 GitHub stars
  • Stars/forks activity: 86 stars, 16 forks; issue activity unavailable in current metadata
  • Dependency/runtime risk: command execution surface, credential or environment access
  • Permission surface: secrets or environment access, shell or command execution

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Compare nearby options

Related skills to audit next