The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads binaries and tools required for its operation during setup and testing phases.
bootstrap.sh fetches the graphos-factory product binary from the author's official GitHub repository (github.com/apollographql/graphos-factory).
toolchain.sh downloads the Apollo Rover CLI from rover.apollo.dev, the Apollo Router from the author's GitHub releases (github.com/apollographql/router), and the WireMock standalone JAR from the Maven Central repository (repo1.maven.org).
[REMOTE_CODE_EXECUTION]: The toolchain.sh script executes a remote installation pattern using curl -fsSL ... | sh to install the Apollo Rover CLI. This originates from the official vendor domain (apollo.dev) and is the author's standard recommended installation method for the tool.
[COMMAND_EXECUTION]: The skill makes extensive use of shell scripts to orchestrate development workflows, including executing rover, java, curl, git, and jq. These operations are local to the user's environment and are used to build, compose, and test GraphQL subgraphs.
[INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface for untrusted data as it processes OpenAPI and Swagger specifications to generate subgraph inventories. It mitigates risks by using a compiled Rust binary for parsing and maintaining structured data (JSON/YAML) with integrity checks through a locking mechanism.

graphos-factory