neo4j-cli-tools-skill

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides instructions for installing the neo4j-cli tool using an official installer script.
  • Evidence: curl -sSfL https://neo4j.sh/install.sh | bash found in SKILL.md.
  • The script is retrieved from an official domain associated with the technology vendor, representing standard installation behavior for this tool.
  • [COMMAND_EXECUTION]: The skill utilizes several CLI tools to perform database operations, including management, backup, and querying tasks.
  • Evidence: Use of neo4j-cli, neo4j-admin, and cypher-shell throughout SKILL.md and reference files.
  • These tools are used for their primary intended purpose of database administration and automation.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface where data retrieved from database queries could potentially contain malicious instructions designed to influence the agent's behavior.
  • Ingestion points: Data is ingested through query tools like neo4j-cli query and cypher-shell as documented in SKILL.md.
  • Boundary markers: The instructions do not specify explicit delimiters or warnings for the agent to ignore instructions embedded within data returned from the database.
  • Capability inventory: The skill allows the use of the Bash tool to execute system commands as shown in SKILL.md.
  • Sanitization: There is no mention of sanitizing or filtering data returned from queries before the agent processes it.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 12:42 PM