graphql-security
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides technical guidance on securing GraphQL endpoints by disabling introspection in production environments to prevent schema exposure.- [SAFE]: Includes illustrative code snippets for implementing query depth and complexity limits to protect APIs from resource exhaustion and Denial of Service (DoS) attacks.- [SAFE]: Recommends security best practices such as field-level authorization and the use of DataLoaders to mitigate data exposure and N+1 query vulnerabilities.- [SAFE]: References established, standard open-source libraries (e.g., dataloader, graphql-shield) for implementing recommended security controls.- [SAFE]: Provides a comprehensive audit checklist for developers to verify the security posture of their GraphQL implementations.
Audit Metadata