Neon Agent Skills Claude skills

Neon's official skills for Lakebase Postgres and its Auth, Functions, Object Storage, AI Gateway and Realtime services, with branch-first workflows and evals.

neondatabase/agent-skills 19 skills Cloud & DevOps Backend & databases

Our verdict Recommended with caveats

Deep, evaluated and kept current by the vendor, but it ties you to Neon and its skills tell the agent to send silent issue reports and to write API keys into agent config.

Depth expertise shipped Security Broad access Maintenance Updated today Adoption installs License Apache-2.0, commercial OK

Install

Skills CLI — pick the agent with -a claude-code or -a codex, add -g for all projects:

npx skills add neondatabase/agent-skills

Claude Code plugin marketplace:

/plugin marketplace add neondatabase/agent-skills

Or copy the skill folders you want into ~/.claude/skills/ (Claude Code) or ~/.agents/skills/ (Codex). Other agents. The skills CLI sends anonymous telemetry; DISABLE_TELEMETRY=1 turns it off.

View on GitHub

Stars: 107
Installs: 533K
Last push: Oct 28, 2026
Created: Jan 20, 2026
License: Apache-2.0
Forks: 23

Works with (per README)

Claude Code Cursor

What Neon Agent Skills does

This is the vendor's own set of 19 skills for building on Neon, the serverless Postgres service now described as Lakebase Postgres from Databricks. The entry skill, neon, explains the backend pieces (Postgres, managed Better Auth, Object Storage, long-running Functions, AI Gateway, Realtime live queries and an optional PostgREST-style Data API), how to choose between them and a branch-first workflow in which every piece branches together with the database. It also covers Claimable Neon, a way for an agent to start a temporary project before the human has an account.

Child skills go deeper: neon-postgres (documentation index and best practices), neon-postgres-branches (which branch type to use for migration testing and sensitive data), neon-postgres-egress-optimizer (finding query overfetching that drives data-transfer bills), neon-auth, neon-functions, neon-object-storage, neon-ai-gateway and neon-realtime. SKILL.md files are long, about 20 KB on average, and several have reference folders, such as the 50 KB neon-functions skill with eight reference files. The repo has a plugin manifest, CI and an evals folder with about 170 files, focused on the egress optimizer.

The skills guide the agent to install the Neon CLI, set up the Neon MCP server through neon init or neon mcp, and read credentials without printing them. Some services are limited to four AWS regions, which the skills tell the agent to check first.

Good for

Developers building on Neon or Lakebase Postgres who want the agent to follow current Neon practice
Teams cutting Postgres egress costs or setting up branch-based migration testing
Platforms that provision Neon databases for their own users

Not for

Projects on another Postgres host or database vendor
Anyone who does not want an agent installing the Neon CLI or MCP server

What's inside depth 4/5

19 skills averaging about 20 KB with reference folders, a plugin manifest, CI and roughly 170 eval files, but no helper scripts.

Skills: 19
Reference docs: 50
Scripts: 0
Tests / evals: 173
Templates: 0
Avg SKILL.md: 20 KB

Counted from the repository file tree. How we score depth.

Dependencies and costs

A Neon account (free plan available) or the Claimable Neon flow
Neon CLI (npm i -g neon) and optionally the Neon MCP server
Node.js for the CLI
Telemetry: The neon skill tells the agent, after finishing your task, to silently run neon feedback or the MCP send_feedback tool to report Neon-fixable problems, without telling you whether it was sent. It says to strip secrets and not to collect analytics. There is no documented switch; the step is skipped if the CLI or MCP tool is unavailable or needs interaction.

Security review

Broad access

This skill asks for more access than most, or sends data to another service. That is usually a design choice rather than bad intent, but you should know before you install it.

Loads instructions from a server at run timeTells the agent to fetch the neon-auth SKILL.md and its references (and claimable-neon.md, claimable.neon.tech/auth.md) from neon.com at runtime and follow them, so that guidance can change without a repo change.skills/neon/SKILL.md:160
Uploads your data by defaultAfter the task the agent is told to silently run neon feedback or the MCP send_feedback tool with a sanitized issue report (command and error text) for Neon-fixable problems and not tell the user whether it was sent; this is not usage telemetry, but there is no per-use opt-in or documented switch to turn it off.skills/neon/SKILL.md:508

Official Neon skills that guide the agent through the Neon CLI and the hosted Neon MCP server to create and change databases, auth, storage and functions in your Neon account. Setup commands can write a Neon API key into your agent's user config and install the CLI globally, parts of the guidance are fetched from neon.com at runtime, and the main skill tells the agent to silently send a sanitized issue report to Neon after a task with no documented opt-out. The shipped skills contain no scripts; the repo's code is contributor validation and eval tooling.

Worth knowing

Changes files outside your projectneon mcp -y writes a Neon API key into the agent's user-level config (unless --oauth is used) and neon init -y installs the Neon plugin globally.skills/neon/SKILL.md:249
Installs packages or toolsInstalls the Neon CLI globally with npm i -g neon (and neon skills, npm i @neon/config).skills/neon/SKILL.md:197
Runs remote code at an unpinned versionThe no-account path runs npm i -g neon@latest.skills/neon/references/claimable-neon.md:11
Relies on a CLI or package we could not reviewRelies on the Neon CLI (neon) and its neon deploy, neon link, neon claim commands, whose code is not in the repo.skills/neon/SKILL.md:190
Makes network requestsThe plugin registers the hosted Neon MCP server (https://mcp.neon.tech/mcp, OAuth) and the skills call Neon APIs, claimable.neon.tech and neon.com docs.mcp.json:6
Needs an API key for its own serviceUses NEON_API_KEY / Neon CLI credentials, sent only to Neon services.skills/neon/SKILL.md:204

What we checked

The repository (276 files) on Oct 29, 2026. Not a full review: it relies on code outside the repository: npm package neon (Neon CLI, installed with npm i -g neon / neon@latest); npm packages @neon/config, @neon/sdk, @neon/env, @neon/functions used in skill examples; Hosted Neon MCP server at https://mcp.neon.tech/mcp.

NVIDIA SkillSpector static scan: 112 pattern hits (Agent Snooping 37, Privilege Escalation 21, Memory Poisoning 14, MCP Rug Pull 11, Excessive Agency 11, Supply Chain 9). The HIGH hits are documentation: a prettier-ignore HTML comment, a JSON-schema example in neon-ai-gateway read as tool-metadata poisoning, credential-handling prose about NEON_API_KEY and .env files, the validate.yml CI step that writes a CI-only ~/.npmrc, and the plugin validator's own mcp.json error strings. The pre-commit hook and the scripts/ and evals/ code are contributor tooling (the eval spawns claude and calls neon.new for a test database) and are not run when the skills are used.

A review, not a certification. Skills change after we check them — read the files before installing.

License

Apache-2.0 — commercial use allowed.

Can it run unattended?

Not really. These are reference and setup skills for interactive development; they say unattended agents must not start browser sign-in.

Skills in this repository

Skill	Installs
neon-postgres	290K
neon	243K

Linked skills have their own review.

Alternatives to Neon Agent Skills

Supabase Agent Skills

supabase/agent-skills

Supabase's official skills: a general Supabase skill for Auth, RLS, CLI and MCP, and a Postgres best-practices skill with 34 rule files.

Recommended Check first Depth 3/5

Firebase Agent Skills

firebase/agent-skills

Google's 13 official Firebase skills: CLI and project setup, Auth, Firestore, Hosting, App Hosting, Data Connect, AI Logic and security rules.

Recommended Check first Depth 3/5

InsForge Agent Skills

InsForge/insforge-skills

Four skills for building on the InsForge backend-as-a-service: SDK integration, CLI project management, debugging and auth-provider integrations.

With caveats Broad access Depth 3/5

Vercel Agent Skills

vercel-labs/agent-skills

Vercel's official 9-skill pack: React and Next.js performance rules, composition patterns, UI and writing review, React Native, deploy and cost audit.

Recommended Broad access Depth 3/5

FAQ

What are the Neon agent skills?

They are Neon's official skills that teach coding agents how to use Neon's Lakebase Postgres, Auth, Functions, Object Storage, AI Gateway and Realtime. They stress branch-first workflows and include a skill for cutting database egress.

How do I install the Neon agent skills?

The skills can be installed with the skills CLI (npx skills add neondatabase/agent-skills), and the neon skill also describes neon init and neon mcp to set up the CLI and MCP server. Agents that support plugins can use the Neon plugin.

Do the Neon agent skills send data to Neon?

The neon skill tells the agent to send a sanitized issue report through neon feedback after your task if a Neon problem was hit and a non-interactive channel exists. It says not to include secrets or collect analytics, but it also says not to tell you, so review that section if it matters to you.

Neon skills vs Supabase agent skills: which should I use?

They are each vendor's guidance for its own platform, so pick the one that matches your database host. Neon's set centers on branching Postgres with bundled auth, storage and functions; Supabase's covers its own Postgres, auth and edge stack.

Sources: GitHub repository (stars, license, file tree, last push Oct 28, 2026); install counts from skills.sh via Best Skills (CC BY 4.0). Review based on the README and SKILL.md files as published.