graphql
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a documentation-focused resource that provides best practices and code snippets for GraphQL. It does not perform any automated actions, execute shell commands, or access sensitive system resources.
- [EXTERNAL_DOWNLOADS]: The documentation references standard, well-known industry libraries including Apollo Server/Client, GraphQL Yoga, Graphene, Strawberry, and specialized tools like DataLoader and GraphQL Code Generator. These references are purely for educational purposes and do not involve suspicious installation patterns or execution of remote scripts.
- [COMMAND_EXECUTION]: The skill provides example CLI commands for initializing package managers and code generation tools (e.g.,
npm install). These are standard development practices and are not executed by the skill itself. - [DATA_EXFILTRATION]: No patterns of data collection or exfiltration were found. Examples involving JWT or authentication demonstrate secure practices such as context-based authorization and the use of environment variables for secrets.
- [OBFUSCATION]: No obfuscated content or hidden URLs were detected. The use of Base64 in the Relay cursor example is standard for that specific technical implementation.
Audit Metadata