api-graphql-mercurius

Pass

Audited by Gen Agent Trust Hub on Jul 25, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate architectural patterns for implementing GraphQL on Fastify using the Mercurius plugin. It correctly identifies and mitigates common GraphQL risks by recommending query depth limits and conditionally disabling management tools like GraphiQL in production environments.
  • [SAFE]: All identified dependencies, including core plugins like @mercuriusjs/federation and utilities like mqemitter-redis, are standard, reputable packages within the Fastify/Mercurius ecosystem.
  • [SAFE]: Analysis of the instructions and examples revealed no malicious patterns such as prompt injection, unauthorized data exfiltration, or code obfuscation. The skill appropriately uses per-request context and environment variables for sensitive operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 25, 2026, 02:34 AM
Security Audit — agent-trust-hub — api-graphql-mercurius