Graph DB Toolkit

• Analyzed: May 7, 2026, 12:56 AM
• Findings: 1
• Version: 1.0.0
• Hash: dfd81ca270d99b9c0cd11ef30aa94b08fe7c43368c9dd028b134c5e68c94441a
• Source: palm
• External report: View on VirusTotal

Findings (1)

The toolkit contains potential Cypher injection vulnerabilities in `scripts/neo4j_client.py` and `scripts/cypher_builder.py` due to direct string interpolation of labels, relationship types, and property keys into query strings. While these patterns are common in graph database utilities, the lack of sanitization poses a risk if the AI agent processes untrusted input. No evidence of intentional malicious behavior, data exfiltration, or prompt injection was found.