neo4j-aura-provisioning-skill

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the official aura-cli binary from the vendor's repository (github.com/neo4j/aura-cli).
  • [PRIVILEGE_ESCALATION]: The instructions recommend using sudo to move the downloaded CLI binary to a system binary directory (/usr/local/bin/), which is standard procedure for installing command-line tools.
  • [COMMAND_EXECUTION]: The skill provides various Bash scripts for instance management, including polling status, creating instances, and verifying database connectivity.
  • [DATA_EXPOSURE]: The skill includes extensive security guidance for handling sensitive information. It instructs users to write credentials to .env files and verify that these files are listed in .gitignore to prevent accidental exposure via version control.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data such as API responses and user-provided configuration (e.g., CSV files in the Data Importer section). While these represent ingestion points for potentially untrusted data, the capabilities are limited to infrastructure provisioning and standard database operations.
  • Ingestion points: API responses from api.neo4j.io, CSV data sources for the Data Importer.
  • Boundary markers: Absent.
  • Capability inventory: Subprocess execution (CLI tools), file system writes (credentials/env files), and network operations (REST API calls).
  • Sanitization: Not explicitly performed in the provided scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 03:56 PM