api-graphql-yoga
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides detailed patterns for production hardening, including CORS origin locking, CSRF prevention through custom headers, and query complexity protection using GraphQL Armor plugins in
examples/production.md. - [SAFE]: Built-in security features of GraphQL Yoga, such as default error masking to prevent information leakage of database internals or stack traces, are correctly documented and prioritized in
examples/error-handling.md. - [SAFE]: All external dependencies and plugins referenced (e.g.,
@graphql-yoga/plugin-response-cache,graphql-ws,ioredis) are official or well-known libraries in the GraphQL ecosystem. - [SAFE]: The code snippets for file uploads in
examples/core.mduse standard WHATWG File APIs and include defensive coding practices like file name length validation.
Audit Metadata