neo4j-graphql-skill

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The README includes an install command that will fetch and execute code from the GitHub repo https://github.com/neo4j-contrib/neo4j-skills via "npx skills add https://github.com/neo4j-contrib/neo4j-skills --skill neo4j-graphql-skill", which runs remote code at install time and is presented as a required step to add the skill.