skills/agents-inc/skills/api-graphql-yoga/Snyk

api-graphql-yoga

Warn

Audited by Snyk on Aug 14, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). GraphQL Yoga’s required runtime workflow (createYoga as a Fetch/HTTP handler) ingests outsider-authored free text from each incoming HTTP request (e.g., GraphQL query, variables/operationName parsed in onRequestParse/onParams) before parsing/validation/execution.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 14, 2026, 07:36 AM

Issues

1

Security Audit — snyk — api-graphql-yoga