neo4j-aura-provisioning-skill

Pass

Audited by Gen Agent Trust Hub on May 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the aura-cli package via pip. This is the official command-line interface for Neo4j Aura and is a standard requirement for the skill's functionality.
  • [COMMAND_EXECUTION]: The skill uses several Bash commands to manage cloud infrastructure, including creating, pausing, and resizing database instances. It also uses cypher-shell for connectivity verification. All commands are aligned with the skill's stated purpose of infrastructure provisioning.
  • [CREDENTIALS_UNSAFE]: The skill provides guidance on managing sensitive information like AURA_CLIENT_ID, AURA_CLIENT_SECRET, and database passwords. It correctly advises the use of environment variables and .env files, and explicitly includes a step to add the .env file to .gitignore to prevent credential exposure in version control.
Audit Metadata
Risk Level
SAFE
Analyzed
May 1, 2026, 04:03 AM