neo4j-cypher-query-analyze

智能图数据库查询助手 - 自动感知 Schema 结构，根据自然语言生成精准的 Cypher 查询

This skill appears coherent for generating and running Neo4j Cypher queries, but take these precautions before installing: - Only provide a least-privilege DB account (read-only) unless you explicitly need write operations; verify config security.allow_write_operations is false. - Confirm GRAPHDB_URI uses TLS/secure endpoint and the agent's network access is restricted to the DB host (avoid exposing credentials to wide networks). - Be aware schema sampling (MATCH ... RETURN n LIMIT 1) will read real node data and the skill caches sample properties in memory; if your graph contains sensitive data, test on a non-production snapshot or increase the sensitive_properties list in config.yaml. - Require explicit confirmations for any write operations and review audit logs when the skill runs queries. - If you do not want the agent to call this skill autonomously, disable autonomous invocation or restrict when it is invoked. - Rotate credentials after testing and avoid supplying admin-level credentials to third-party or unknown skills.

Type: OpenClaw Skill Name: neo4j-cypher-query-analyze Version: 1.0.0 The skill is a legitimate Neo4j graph database assistant designed to generate and execute Cypher queries based on natural language. It includes well-defined security guardrails in SKILL.md, such as keyword filtering to prevent destructive operations (CREATE, DELETE, DROP) and sensitive data masking for properties like passwords and tokens. While it utilizes the shell tool to execute curl commands for database interaction, the logic is transparent, follows best practices for schema caching, and lacks any indicators of malicious intent or data exfiltration.