Neon PostgreSQL Skill
Enables serverless PostgreSQL database management with features like connection pooling, branching, and autoscaling for efficient application deployment.
Install this skill
Security score
The Neon PostgreSQL Skill skill was audited on Feb 28, 2026 and we found 20 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 84 | const post = await sql`SELECT * FROM posts WHERE id = ${postId}`; |
Template literal with variable interpolation in command context
| 87 | await sql`INSERT INTO posts (title, content) VALUES (${title}, ${content})`; |
Template literal with variable interpolation in command context
| 181 | ```yaml |
Template literal with variable interpolation in command context
| 276 | const result = await sql`SELECT * FROM users WHERE id = ${userId}`; |
Template literal with variable interpolation in command context
| 279 | const result = await sql(`SELECT * FROM users WHERE id = '${userId}'`); |
Template literal with variable interpolation in command context
| 290 | await sql`INSERT INTO users (email) VALUES (${email})`; |
Access to .env file
| 78 | const sql = neon(process.env.DATABASE_URL!); |
Access to .env file
| 97 | const pool = new Pool({ connectionString: process.env.DATABASE_URL }); |
Access to .env file
| 122 | const sql = neon(process.env.DATABASE_URL!); |
Access to .env file
| 134 | const pool = new Pool({ connectionString: process.env.DATABASE_URL }); |
Access to .env file
| 240 | const sql = neon(process.env.DATABASE_URL!, { |
Access to .env file
| 255 | const sql = neon(process.env.DATABASE_URL!); |
Access to .env file
| 259 | const pool = new Pool({ connectionString: process.env.DATABASE_URL }); |
Access to .env file
| 265 | # .env.development |
Access to .env file
| 268 | # .env.production |
Access to .env file
| 287 | const sql = neon(process.env.DATABASE_URL!); |
Access to .env file
| 308 | const sql = neon(process.env.DATABASE_URL!); |
Access to .env file
| 331 | const sql = neon(process.env.DATABASE_URL!); |
Access to .env file
| 352 | url: process.env.DATABASE_URL!, |
External URL reference
| 14 | 1. Go to [console.neon.tech](https://console.neon.tech) |