neo4j-security-skill
便于自动化权限配置与审计，适合需要大规模管理访问控制的团队。
需管理员权限，误操作可能影响整个系统的访问控制。
以编程方式管理 Neo4j 的用户、角色与图/数据库权限与属性级访问控制。
通过 Cypher 在 system DB 上程序化管理 Neo4j 的用户、角色与权限：支持 RBAC/ABAC、创建/修改/删除用户和角色、Grant/Deny/REVOKE 权限、属性级和子图访问控制，并能用 SHOW PRIVILEGES 查看当前权限。用在做用户生命周期管理或实现细粒度访问控制时；属性级与 ABAC 需 Enterprise 版，Cypher 语句可交给 neo4j-cypher-skill 写。
▸ 展开 SKILL.md 英文原文
Programmatic security management in Neo4j — RBAC/ABAC, user lifecycle (CREATE/ALTER/DROP USER), role lifecycle (CREATE/GRANT ROLE/DROP ROLE), privilege grants and denies (GRANT/DENY/REVOKE on graph, database, DBMS), property-level access control, sub-graph access control, SHOW PRIVILEGES inspection, and auth provider config reference (LDAP, OIDC/SSO). Use when an agent needs to manage users, roles, or privileges programmatically via Cypher on the system database. Does NOT handle Cypher query writing — use neo4j-cypher-skill. Does NOT handle cluster ops or backups — use neo4j-cli-tools-skill. Property-level security and ABAC require Enterprise Edition.
帮我安装这个 skill：https://raw.githubusercontent.com/neo4j-contrib/neo4j-skills/main/neo4j-security-skill/SKILL.mdcurl -fsSL "https://raw.githubusercontent.com/neo4j-contrib/neo4j-skills/main/neo4j-security-skill/SKILL.md"## When to Use - Creating, altering, suspending, or dropping users - Creating roles, granting/revoking role membership - Granting/denying/revoking graph, database, or DBMS privileges - Inspecting current privileges (`SHOW PRIVILEGES`) - Implementing property-level access control (read/write per property) - Setting up ABAC rules against OIDC claims - Referencing LDAP/SSO auth provider configuration ## When NOT to Use - **Writing Cypher queries against application data** → `neo4j-cypher-skill` - **Cluster ops, backups, server config** → `neo4j-cli-tools-skill` - **Driver connection setup** → `neo4j-driver-*-skill` --- ## MCP Write Gate — MANDATORY Before executing ANY of the following, sho