neo4j-aura-provisioning-skill
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the official
aura-clibinary from the vendor's repository (github.com/neo4j/aura-cli). - [PRIVILEGE_ESCALATION]: The instructions recommend using
sudoto move the downloaded CLI binary to a system binary directory (/usr/local/bin/), which is standard procedure for installing command-line tools. - [COMMAND_EXECUTION]: The skill provides various Bash scripts for instance management, including polling status, creating instances, and verifying database connectivity.
- [DATA_EXPOSURE]: The skill includes extensive security guidance for handling sensitive information. It instructs users to write credentials to
.envfiles and verify that these files are listed in.gitignoreto prevent accidental exposure via version control. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data such as API responses and user-provided configuration (e.g., CSV files in the Data Importer section). While these represent ingestion points for potentially untrusted data, the capabilities are limited to infrastructure provisioning and standard database operations.
- Ingestion points: API responses from
api.neo4j.io, CSV data sources for the Data Importer. - Boundary markers: Absent.
- Capability inventory: Subprocess execution (CLI tools), file system writes (credentials/env files), and network operations (REST API calls).
- Sanitization: Not explicitly performed in the provided scripts.
Audit Metadata