neo4j-gds-skill
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external Neo4j databases. This creates a surface for indirect prompt injection where data retrieved from the database (e.g., node properties or graph results) could contain malicious instructions intended to influence the agent's downstream behavior.
- Ingestion points: External database content retrieved via the
read-cyphertool and Pythonstreammethods as described inSKILL.md. - Boundary markers: None identified in the provided instructions to delimit or ignore instructions embedded within retrieved data.
- Capability inventory: The skill utilizes
write-cypherfor database modifications,Bashfor environment setup, andWebFetchfor external documentation access as defined inSKILL.md. - Sanitization: No specific sanitization or validation logic for external data is prescribed in the skill instructions.
Audit Metadata