graph-query
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill accepts natural language input from users to query a database, which could potentially contain malicious instructions intended to manipulate the agent.
- Ingestion points: The script
scripts/run_query.pytakes user input through thequery_wordscommand-line argument. - Boundary markers: No explicit delimiters or instructions are used to separate the user query from the surrounding script logic or to warn the processing engine about untrusted data.
- Capability inventory: The skill is capable of executing Python scripts (
scripts/run_query.py) and performing read operations on a Neo4j knowledge graph containing historical reports and transaction data. - Sanitization: The user-supplied input is joined and passed directly to the internal
queryfunction without visible sanitization or filtering to prevent prompt injection or query manipulation. - [COMMAND_EXECUTION]: The skill uses the
Bashtool to execute a local Python script (scripts/run_query.py) that handles natural language processing and database interaction.
Audit Metadata