web-cypher-injection
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The file is a purely instructional markdown document describing manual testing techniques for Cypher injection (Neo4j). It does not contain executable scripts, automated commands, or network operations targeting the agent's environment.
- [SAFE]: No obfuscation, prompt injection, or credential harvesting patterns were detected. The references to external URLs are examples for out-of-band testing (SSRF) and do not represent hardcoded malicious destinations.
- [SAFE]: The skill intended for use in 'pentest' and 'bugbounty' modes is consistent with its content, focusing on identifying misconfigurations like the APOC procedures and LOAD CSV functionality.
Audit Metadata