neo4j-migration-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill workflow involves scanning local files and codebases, and optionally fetching official documentation and changelogs from Neo4j web properties or GitHub raw URLs when specifically prompted by the user/migration path, without consuming monitored external communication channels or untrusted outsider submission feeds.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The files contain multiple markdown files with absolute URLs referencing raw GitHub content for version changelogs and documentation (raw.githubusercontent.com) and external artifact registries (nuget.org, npmjs.com, pypi.org, central.sonatype.com), which act as remote runtime dependencies fetched by the skill instructions.