neo4j-getting-started-skill
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill programmatically generates several Python scripts to facilitate project setup, including
provision_aura.pyfor database creation,generate.pyfor synthetic data, andimport.pyfor data loading. These scripts are executed within a local virtual environment to finalize the application environment.\n- [INDIRECT_PROMPT_INJECTION]: The skill includes functionality to construct Knowledge Graphs from external data sources, which presents a surface for indirect prompt injection.\n - Ingestion points: Documents (PDF, MD, TXT) and CSV files stored in the
data/directory are processed by theSimpleKGPipelineandpandasduring the load stage.\n - Boundary markers: The instructions do not specify the use of boundary markers or delimiting wrappers for ingested content.\n
- Capability inventory: The agent has access to powerful tools including
Bashfor command execution,Writefor file creation, andWebFetchfor external data retrieval.\n - Sanitization: No specific sanitization or filtering logic was identified for data processed by the LLM during entity extraction.\n- [EXTERNAL_DOWNLOADS]: The skill retrieves necessary binaries and datasets from external vendor-controlled sources.\n
- Evidence: Downloads the
neo4j-mcpbinary from the official Neo4j GitHub repository and fetches demo datasets from vendor domains such asdata.neo4j.com.\n- [COMMAND_EXECUTION]: The skill performs environment configuration using system-level commands.\n - Evidence: Uses
Bashto rundockerfor database containerization,pipfor installing Python dependencies, andchmodto grant execution permissions to project binaries.
Audit Metadata