neo4j-driver-go-skill
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the official Neo4j Go driver using
go get github.com/neo4j/neo4j-go-driver/v6. - [INDIRECT_PROMPT_INJECTION]: The skill handles the ingestion of data from external database sources, creating a potential surface for indirect prompt injection if the database content is untrusted.
- Ingestion points: Results are ingested from the database via
res.Next(ctx),record.Get(), andneo4j.GetRecordValue()as shown inSKILL.md. - Boundary markers: The skill contains explicit warnings against string concatenation for query building, recommending the use of parameters (
map[string]any) instead. - Capability inventory: The skill possesses the capability to execute both read and write queries on the database through
neo4j.ExecuteQueryandsession.ExecuteWrite. - Sanitization: The driver's native parameter handling and type-safe extraction helpers (
GetRecordValue[T]) provide robust sanitization against standard injection vectors.
Audit Metadata