neon-postgres

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent to fetch Neon documentation at runtime (e.g., https://neon.com/docs/llms.txt and https://neon.com/docs/introduction/branching.md), meaning remote markdown would be loaded into the agent context and could directly control prompts/responses.