neo4j-security-skill

Programmatic security management in Neo4j — RBAC/ABAC, user lifecycle (CREATE/ALTER/DROP USER), role lifecycle (CREATE/GRANT ROLE/DROP ROLE), privilege grants and denies (GRANT/DENY/REVOKE on graph, database, DBMS), property-level access control, sub-graph access control, SHOW PRIVILEGES inspection, and auth provider config reference (LDAP, OIDC/SSO). Use when an agent needs to manage users, roles, or privileges programmatically via Cypher on the system database. Does NOT handle Cypher query writing — use neo4j-cypher-skill. Does NOT handle cluster ops or backups — use neo4j-cli-tools-skill. Property-level security and ABAC require Enterprise Edition.

1.19x

Quality

94%

Does it follow best practices?

Impact

100%

1.19x

Average score across 3 eval scenarios

Securityby

Passed

No findings from the security scan

Evaluation results

100%

15%

Analyst Access Setup for PatientConnect

Healthcare analyst RBAC with property-level denial

Criteria

Without this skill

With this skill

ACCESS before graph grants

100%

Broad MATCH then DENY pattern

100%

All three properties denied

100%

Parameterized password

100%

System database annotation

100%

No FOR with write

100%

Single property per DENY clause

50%

100%

PBAC property write-protection

100%

SHOW ROLE PRIVILEGES AS COMMANDS

100%

Finance Database Access Control for FinCorp

ABAC native user tag-based dynamic role assignment

Criteria

Without this skill

With this skill

Positive finance tag check

100%

No negated tag conditions

100%

Compound auditor rule — positive checks

100%

neo4j.conf ABAC provider note

100%

USER METADATA MANAGEMENT grant

100%

ALTER USER tag clause ordering

100%

NULL or defensive design note

100%

33%

Security Audit and Disaster-Recovery Export for Neo4j

Neo4j security audit and disaster-recovery Cypher script

Criteria

Without this skill

With this skill

SHOW USERS AS COMMANDS used

100%

WITH AUTH warning or omission

100%

System database targeting

100%

DENY filter with YIELD *

100%

Production database filter

100%

SHOW ROLE AS COMMANDS for GRANTs

40%

100%

Role assignment export

100%

REVOKE Cypher 25 note

100%

IMMUTABLE flagged separately

60%

100%

Clearly labeled sections

100%

Repository: neo4j-contrib/neo4j-skills
Path: neo4j-security-skill/SKILL.md
Commit: a3627d2

Evaluated: 4 days ago
Agent: Claude Code
Model: Claude Sonnet 4.6

Table of Contents

Analyst Access Setup for PatientConnect Finance Database Access Control for FinCorp Security Audit and Disaster-Recovery Export for Neo4j

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.