From 5c2093acc581746ed54a3c611457107418afa83a Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 18 Sep 2026 19:38:29 +0000 Subject: [PATCH 1/3] chore(deps): update neondatabase/agent-skills digest to e8be8ff --- skills/neon-ai-gateway/spec.yaml | 2 +- skills/neon-auth/spec.yaml | 2 +- skills/neon-object-storage/spec.yaml | 2 +- skills/neon-postgres-branches/spec.yaml | 2 +- skills/neon-postgres-egress-optimizer/spec.yaml | 2 +- skills/neon-postgres/spec.yaml | 2 +- skills/neon/spec.yaml | 2 +- 7 files changed, 7 insertions(+), 7 deletions(-) diff --git a/skills/neon-ai-gateway/spec.yaml b/skills/neon-ai-gateway/spec.yaml index a55db685..f12639f0 100644 --- a/skills/neon-ai-gateway/spec.yaml +++ b/skills/neon-ai-gateway/spec.yaml @@ -19,7 +19,7 @@ metadata: spec: repository: "https://github.com/neondatabase/agent-skills" - ref: "b5beae8767c18ee7b9dc1ae1eb6c93c7cb1a96c4" # main as of 2026-09-18 + ref: "e8be8ff34267b559c90106a5e0bafd3071e76d46" # main as of 2026-09-18 path: "skills/neon-ai-gateway" version: "0.1.0" diff --git a/skills/neon-auth/spec.yaml b/skills/neon-auth/spec.yaml index edc0de9b..6b9dd1ab 100644 --- a/skills/neon-auth/spec.yaml +++ b/skills/neon-auth/spec.yaml @@ -17,7 +17,7 @@ metadata: spec: repository: "https://github.com/neondatabase/agent-skills" - ref: "b5beae8767c18ee7b9dc1ae1eb6c93c7cb1a96c4" # main as of 2026-09-18 + ref: "e8be8ff34267b559c90106a5e0bafd3071e76d46" # main as of 2026-09-18 path: "skills/neon-auth" version: "0.1.0" diff --git a/skills/neon-object-storage/spec.yaml b/skills/neon-object-storage/spec.yaml index 9c4e3bf9..c234d88a 100644 --- a/skills/neon-object-storage/spec.yaml +++ b/skills/neon-object-storage/spec.yaml @@ -19,7 +19,7 @@ metadata: spec: repository: "https://github.com/neondatabase/agent-skills" - ref: "b5beae8767c18ee7b9dc1ae1eb6c93c7cb1a96c4" # main as of 2026-09-18 + ref: "e8be8ff34267b559c90106a5e0bafd3071e76d46" # main as of 2026-09-18 path: "skills/neon-object-storage" version: "0.1.0" diff --git a/skills/neon-postgres-branches/spec.yaml b/skills/neon-postgres-branches/spec.yaml index a03d051f..9c868d34 100644 --- a/skills/neon-postgres-branches/spec.yaml +++ b/skills/neon-postgres-branches/spec.yaml @@ -16,7 +16,7 @@ metadata: spec: repository: "https://github.com/neondatabase/agent-skills" - ref: "b5beae8767c18ee7b9dc1ae1eb6c93c7cb1a96c4" # main as of 2026-09-18 + ref: "e8be8ff34267b559c90106a5e0bafd3071e76d46" # main as of 2026-09-18 path: "skills/neon-postgres-branches" version: "0.1.0" diff --git a/skills/neon-postgres-egress-optimizer/spec.yaml b/skills/neon-postgres-egress-optimizer/spec.yaml index 6296f89f..8e58f7cf 100644 --- a/skills/neon-postgres-egress-optimizer/spec.yaml +++ b/skills/neon-postgres-egress-optimizer/spec.yaml @@ -9,7 +9,7 @@ metadata: spec: repository: "https://github.com/neondatabase/agent-skills" - ref: "b5beae8767c18ee7b9dc1ae1eb6c93c7cb1a96c4" # main as of 2026-09-18 + ref: "e8be8ff34267b559c90106a5e0bafd3071e76d46" # main as of 2026-09-18 path: "skills/neon-postgres-egress-optimizer" version: "0.1.9" diff --git a/skills/neon-postgres/spec.yaml b/skills/neon-postgres/spec.yaml index fd643384..c4448e4a 100644 --- a/skills/neon-postgres/spec.yaml +++ b/skills/neon-postgres/spec.yaml @@ -9,7 +9,7 @@ metadata: spec: repository: "https://github.com/neondatabase/agent-skills" - ref: "b5beae8767c18ee7b9dc1ae1eb6c93c7cb1a96c4" # main as of 2026-09-18 + ref: "e8be8ff34267b559c90106a5e0bafd3071e76d46" # main as of 2026-09-18 path: "skills/neon-postgres" version: "0.1.9" diff --git a/skills/neon/spec.yaml b/skills/neon/spec.yaml index 4b79b166..9b2789e2 100644 --- a/skills/neon/spec.yaml +++ b/skills/neon/spec.yaml @@ -19,7 +19,7 @@ metadata: spec: repository: "https://github.com/neondatabase/agent-skills" - ref: "b5beae8767c18ee7b9dc1ae1eb6c93c7cb1a96c4" # main as of 2026-09-18 + ref: "e8be8ff34267b559c90106a5e0bafd3071e76d46" # main as of 2026-09-18 path: "skills/neon" version: "0.1.0" From dd5f729b886b3f78b0fb42f12a9550281f027d0c Mon Sep 17 00:00:00 2001 From: "toolhive-release-app[bot]" <280093410+toolhive-release-app[bot]@users.noreply.github.com> Date: Fri, 18 Sep 2026 19:39:00 +0000 Subject: [PATCH 2/3] chore(skills): bump spec.version for neon,neon-ai-gateway,neon-auth,neon-object-storage,neon-postgres,neon-postgres-branches,neon-postgres-egress-optimizer --- skills/neon-ai-gateway/spec.yaml | 2 +- skills/neon-auth/spec.yaml | 2 +- skills/neon-object-storage/spec.yaml | 2 +- skills/neon-postgres-branches/spec.yaml | 2 +- skills/neon-postgres-egress-optimizer/spec.yaml | 2 +- skills/neon-postgres/spec.yaml | 2 +- skills/neon/spec.yaml | 2 +- 7 files changed, 7 insertions(+), 7 deletions(-) diff --git a/skills/neon-ai-gateway/spec.yaml b/skills/neon-ai-gateway/spec.yaml index f12639f0..a53272eb 100644 --- a/skills/neon-ai-gateway/spec.yaml +++ b/skills/neon-ai-gateway/spec.yaml @@ -21,7 +21,7 @@ spec: repository: "https://github.com/neondatabase/agent-skills" ref: "e8be8ff34267b559c90106a5e0bafd3071e76d46" # main as of 2026-09-18 path: "skills/neon-ai-gateway" - version: "0.1.0" + version: "0.1.1" provenance: repository_uri: "https://github.com/neondatabase/agent-skills" diff --git a/skills/neon-auth/spec.yaml b/skills/neon-auth/spec.yaml index 6b9dd1ab..0fb826db 100644 --- a/skills/neon-auth/spec.yaml +++ b/skills/neon-auth/spec.yaml @@ -19,7 +19,7 @@ spec: repository: "https://github.com/neondatabase/agent-skills" ref: "e8be8ff34267b559c90106a5e0bafd3071e76d46" # main as of 2026-09-18 path: "skills/neon-auth" - version: "0.1.0" + version: "0.1.1" provenance: repository_uri: "https://github.com/neondatabase/agent-skills" diff --git a/skills/neon-object-storage/spec.yaml b/skills/neon-object-storage/spec.yaml index c234d88a..8d9ad926 100644 --- a/skills/neon-object-storage/spec.yaml +++ b/skills/neon-object-storage/spec.yaml @@ -21,7 +21,7 @@ spec: repository: "https://github.com/neondatabase/agent-skills" ref: "e8be8ff34267b559c90106a5e0bafd3071e76d46" # main as of 2026-09-18 path: "skills/neon-object-storage" - version: "0.1.0" + version: "0.1.1" provenance: repository_uri: "https://github.com/neondatabase/agent-skills" diff --git a/skills/neon-postgres-branches/spec.yaml b/skills/neon-postgres-branches/spec.yaml index 9c868d34..57f28a12 100644 --- a/skills/neon-postgres-branches/spec.yaml +++ b/skills/neon-postgres-branches/spec.yaml @@ -18,7 +18,7 @@ spec: repository: "https://github.com/neondatabase/agent-skills" ref: "e8be8ff34267b559c90106a5e0bafd3071e76d46" # main as of 2026-09-18 path: "skills/neon-postgres-branches" - version: "0.1.0" + version: "0.1.1" provenance: repository_uri: "https://github.com/neondatabase/agent-skills" diff --git a/skills/neon-postgres-egress-optimizer/spec.yaml b/skills/neon-postgres-egress-optimizer/spec.yaml index 8e58f7cf..df9af226 100644 --- a/skills/neon-postgres-egress-optimizer/spec.yaml +++ b/skills/neon-postgres-egress-optimizer/spec.yaml @@ -11,7 +11,7 @@ spec: repository: "https://github.com/neondatabase/agent-skills" ref: "e8be8ff34267b559c90106a5e0bafd3071e76d46" # main as of 2026-09-18 path: "skills/neon-postgres-egress-optimizer" - version: "0.1.9" + version: "0.1.10" provenance: repository_uri: "https://github.com/neondatabase/agent-skills" diff --git a/skills/neon-postgres/spec.yaml b/skills/neon-postgres/spec.yaml index c4448e4a..12942981 100644 --- a/skills/neon-postgres/spec.yaml +++ b/skills/neon-postgres/spec.yaml @@ -11,7 +11,7 @@ spec: repository: "https://github.com/neondatabase/agent-skills" ref: "e8be8ff34267b559c90106a5e0bafd3071e76d46" # main as of 2026-09-18 path: "skills/neon-postgres" - version: "0.1.9" + version: "0.1.10" provenance: repository_uri: "https://github.com/neondatabase/agent-skills" diff --git a/skills/neon/spec.yaml b/skills/neon/spec.yaml index 9b2789e2..705b0fb7 100644 --- a/skills/neon/spec.yaml +++ b/skills/neon/spec.yaml @@ -21,7 +21,7 @@ spec: repository: "https://github.com/neondatabase/agent-skills" ref: "e8be8ff34267b559c90106a5e0bafd3071e76d46" # main as of 2026-09-18 path: "skills/neon" - version: "0.1.0" + version: "0.1.1" provenance: repository_uri: "https://github.com/neondatabase/agent-skills" From deed17280babca7d58eabe9cd51737ea96e10794 Mon Sep 17 00:00:00 2001 From: Dan Barr <6922515+danbarr@users.noreply.github.com> Date: Fri, 18 Sep 2026 19:09:51 -0400 Subject: [PATCH 3/3] Allow Neon scan findings Signed-off-by: Dan Barr <6922515+danbarr@users.noreply.github.com> --- skills/neon-postgres-branches/spec.yaml | 2 ++ skills/neon/spec.yaml | 2 ++ 2 files changed, 4 insertions(+) diff --git a/skills/neon-postgres-branches/spec.yaml b/skills/neon-postgres-branches/spec.yaml index 57f28a12..ccf14e57 100644 --- a/skills/neon-postgres-branches/spec.yaml +++ b/skills/neon-postgres-branches/spec.yaml @@ -26,5 +26,7 @@ provenance: security: allowed_issues: + - rule_id: LLM_PROMPT_INJECTION + reason: "Accepted risk: when its bundled `neon` parent is absent, `SKILL.md:19-22` fetches that parent from the official Neon domain or installs it through Neon CLI. This is a documented same-publisher dependency path, not an untrusted third-party source; the mutable remote content is intentionally not pinned to this artifact." - rule_id: MANIFEST_MISSING_LICENSE reason: "neondatabase/agent-skills is licensed Apache-2.0 at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter." diff --git a/skills/neon/spec.yaml b/skills/neon/spec.yaml index 705b0fb7..d8317eb9 100644 --- a/skills/neon/spec.yaml +++ b/skills/neon/spec.yaml @@ -29,5 +29,7 @@ provenance: security: allowed_issues: + - rule_id: ATR_2026_00063 + reason: "FP: `references/claimable-neon.md:41` documents `neon claim create` writing its provisioned variables to `.env` or `.env.local`, with safeguards for existing Neon-managed keys and gitignore. It neither reads a host secret nor transmits data to an external sink, so it is not a multi-skill exfiltration chain." - rule_id: MANIFEST_MISSING_LICENSE reason: "neondatabase/agent-skills is licensed Apache-2.0 at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter."