neo4j-security-skill

What problem does it solve?

This Skill prevents privilege misconfiguration by guiding agents to manage Neo4j security controls—users, roles, and GRANT/DENY privileges—directly from Cypher against the system database.

Core Features & Use Cases

• User management: Create, alter, suspend/activate, and drop users with the right account settings.
• Role management: Create/drop roles and grant or revoke role membership to users.
• Privilege grants & inspection: Grant or deny graph, database, and DBMS privileges, then verify outcomes with SHOW PRIVILEGES / SHOW ROLE.
• Enterprise access controls: Apply property-level and sub-graph access restrictions for fine-grained data visibility.
• ABAC with OIDC: Create auth rules that dynamically map OIDC/JWT claims to roles.

Quick Start

Ask the agent to create a least-privilege read-only role that can connect to database mydb and view Person properties except the ssn property, and then return the generated runnable verification commands to confirm the resulting privileges.