cypher-query-playbook

Run pre-built parameterized Cypher queries for BBOT attack surface analysis in Neo4j.

11|1|Updated May 4, 2026
One-click install
npx skills add https://github.com/dreadnode/capabilities --skill cypher-query-playbook
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cypher-query-playbook
Source: https://github.com/dreadnode/capabilities/tree/main/capabilities/attack-surface-management/skills/cypher-query-playbook
Command: npx skills add https://github.com/dreadnode/capabilities --skill cypher-query-playbook

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Writing custom Cypher queries to analyze BBOT reconnaissance data stored in Neo4j graph databases is time-consuming, error-prone, and requires deep knowledge of both the query language and the BBOT data schema.

Core Features & Use Cases

  • Pre-built Schema-Compatible Queries: Ready-to-use Cypher patterns tailored for BBOT event envelope data structures, eliminating schema compatibility issues.
  • Comprehensive Analysis Coverage: Includes queries for high-value asset discovery, infrastructure mapping, service enumeration, technology analysis, and security finding correlation.
  • Use Case: A red teamer can use these queries to quickly identify dev/staging subdomains, exposed databases, and assets hosting critical security findings without writing custom Cypher from scratch.

Quick Start

Use the cypher-query-playbook skill to retrieve all high-severity security findings and their associated host assets from your BBOT attack surface graph.

Frequently Asked Questions about cypher-query-playbook

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I query BBOT reconnaissance data in Neo4j without writing custom Cypher?

Pre-built, parameterized Cypher query patterns allow you to query BBOT reconnaissance data in Neo4j without writing custom code. These ready-to-use patterns align with the BBOT event envelope schema to prevent compatibility errors and eliminate the need for deep query language expertise.

What Cypher queries can I use for attack surface analysis in Neo4j?

Pre-built Cypher query patterns enable attack surface analysis in Neo4j by targeting high-value asset discovery, infrastructure mapping, service enumeration, technology analysis, and security finding correlation. These parameterized queries prevent injection attacks and align with BBOT data structures.

Do I need deep Cypher expertise to analyze BBOT graph databases?

No deep Cypher expertise is needed to analyze BBOT graph databases. The playbook supplies ready-to-use, parameterized query patterns that handle standard BBOT event envelope data structures, letting you retrieve security findings without writing custom queries from scratch.

How do I find high-severity security findings and exposed databases in my attack surface graph?

Apply the playbook's pre-built Cypher patterns for high-value asset discovery to find high-severity security findings and exposed databases in your attack surface graph. These queries automatically correlate security findings with their associated host assets stored in Neo4j.

Does this Cypher playbook prevent injection attacks when querying BBOT data?

Yes, this Cypher playbook prevents injection attacks when querying BBOT data by utilizing parameterized query patterns. This approach safely handles input values while maintaining compatibility with standard BBOT event envelope data structures during attack surface analysis.