The Agent Skills Directory

[SAFE]: The skill enforces secure credential management by instructing the agent to use environment variables for database URIs and authentication details, explicitly warning against hardcoding secrets in the code or .env files.
[SAFE]: The instructions include specific guidance to prevent Cypher injection attacks by requiring the use of parameterized queries ($param) instead of template literals or string concatenation.
[SAFE]: The skill provides best-practice patterns for resource management, ensuring that database sessions are closed within finally blocks to prevent resource exhaustion and connection leaks.
[SAFE]: Dependencies such as neo4j-driver and dotenv are official and standard packages for the Neo4j ecosystem and Node.js development.
[SAFE]: The skill addresses potential side-effect issues in managed transactions by advising users to move external network calls (like fetch) outside of retryable blocks, preventing unintended multiple executions during transaction retries.
[SAFE]: (Indirect Prompt Injection Analysis) The skill recognizes the risk of processing untrusted data in database queries and provides clear mitigation strategies at the interaction point between user input and the database driver.

neo4j-driver-javascript-skill