knowledge-graph-builder
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalyreferences/query-patterns.md
LOWAnomalyLOW
references/query-patterns.md
No malicious behavior or obfuscation is evident. The main security issue is potential Cypher injection and denial of service through unvalidated max_hops values interpolated into queries in find_relationships and get_subgraph. Enforce strict integer type and bounded ranges before query construction, preferably use safer query-building mechanisms where available, and apply appropriate authorization and traversal limits.
Confidence: 98%Severity: 62%
Audit Metadata