apollo-router
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a set of templates and instructions for generating Apollo Router configuration files for both version 1.x and 2.x.
- [SAFE]: It explicitly warns against hardcoding secrets like API keys and credentials, recommending the use of environment variable expansion (
${env.VAR}) instead throughout all configuration templates. - [SAFE]: The
validation/checklist.mdensures that security hardening steps (e.g., disabling introspection, sandbox, and homepage in production) are followed and verified. - [SAFE]: All external references and domains (e.g.,
apollographql.com,apollo.dev,ghcr.io/apollographql/router) belong to the verified vendor (Apollo GraphQL) or are standard industry endpoints (e.g., OTLP, Datadog). - [SAFE]: The skill uses allowed tools (
Bash,Read,Write, etc.) for legitimate tasks such as config validation, supergraph composition, and local development workflows, with commands restricted to specific binaries (router,rover,docker,curl).
Audit Metadata