build-cypher-query

Name: build-cypher-query
Availability: InStock
Author: SubImage

Build Cypher queries for SubImage Neo4j relationship investigations.

Updated Apr 30, 2026

Search Tags:#neo4j #cypher #graph query #subimage #relationship traversal #access analysis

Ready to run

npx skills add https://github.com/subimagesec/skills --skill build-cypher-query

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: build-cypher-query
Source: https://github.com/subimagesec/skills/tree/main/plugins/subimage-mcp/skills/build-cypher-query
Command: npx skills add https://github.com/subimagesec/skills --skill build-cypher-query

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It helps you answer security and relationship questions that require traversing the SubImage graph when no dedicated MCP tool can return the answer directly.

Core Features & Use Cases

Graph Query Construction: Builds precise Cypher for ownership, reachability, blast radius, permissions, and root-cause investigations.
Schema-Grounded Validation: Uses validated labels, properties, and directed relationships from the MCP schema instead of guessing graph structure.
Efficient Investigation Workflow: Reuses cached model queries when available, probes only when needed, and runs the final query with bounded results.
Use Case: Ask for the transitive access path from an identity to a resource, or for the set of nodes that satisfy a missing-relationship check.

Quick Start

Ask the assistant to build a Cypher query that answers your graph relationship question against SubImage using the validated MCP schema.

Frequently Asked Questions about build-cypher-query

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I write a Cypher query for blast radius analysis in Neo4j?▼

To write a Cypher query for blast radius analysis in Neo4j, you need to traverse the graph using directed relationships from a validated schema. This Skill constructs precise queries that map transitive access paths and reachable nodes from a specific identity or resource.

What is the best way to find a transitive access path from an identity to a resource in a graph?▼

Finding a transitive access path from an identity to a resource requires traversing ownership and permission relationships in the graph. This Skill builds the Cypher query needed to identify the full reachability and access path across identity and inventory data.

How do I check for missing relationships or absence validation in a Neo4j graph?▼

Checking for missing relationships in a Neo4j graph involves building a Cypher query that identifies the set of nodes failing an absence validation check. This Skill generates those specific queries to find nodes lacking required directed relationships.

Can I use this to query attack paths and compliance data without a dedicated tool?▼

Yes, you can use this to query attack paths and compliance data when no dedicated MCP tool returns the answer directly. It applies graph-shaped investigations across access and inventory data using validated labels and properties from the schema.

Do I need to know the exact Neo4j schema labels to build a graph query?▼

Yes, building a graph query requires validated labels, properties, and directed relationships from the SubImage MCP schema instead of guessing the graph structure. The Skill relies on this schema grounding to construct accurate Cypher queries.

How does it handle large graph traversals during relationship traversal?▼

For large graph traversals during relationship traversal, it runs the final query with bounded execution and optional model-query caching. This ensures efficient investigation workflows by reusing cached queries and probing only when needed.