api-graphql-mercurius
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate architectural patterns for implementing GraphQL on Fastify using the Mercurius plugin. It correctly identifies and mitigates common GraphQL risks by recommending query depth limits and conditionally disabling management tools like GraphiQL in production environments.
- [SAFE]: All identified dependencies, including core plugins like
@mercuriusjs/federationand utilities likemqemitter-redis, are standard, reputable packages within the Fastify/Mercurius ecosystem. - [SAFE]: Analysis of the instructions and examples revealed no malicious patterns such as prompt injection, unauthorized data exfiltration, or code obfuscation. The skill appropriately uses per-request context and environment variables for sensitive operations.
Audit Metadata