api-graphql-yoga
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is focused on educational and implementation patterns for GraphQL Yoga. No malicious behavior was detected across any files.
- [SAFE]: It includes dedicated guidance on 'Production Hardening', which covers critical security measures like locking down CORS origins, enabling CSRF prevention, and implementing error masking to prevent internal system leakage.
- [SAFE]: The documentation encourages the use of 'GraphQL Armor' plugins to mitigate common GraphQL vulnerabilities such as query complexity, depth, and alias attacks.
- [SAFE]: All referenced libraries and dependencies (e.g., graphql-yoga, graphql-ws, ioredis, and escape.tech security plugins) are industry-standard, well-known packages in the GraphQL ecosystem.
Audit Metadata