golang-graphql
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch and initialize projects using well-known libraries such as
github.com/99designs/gqlgenandgithub.com/graph-gophers/graphql-go. These are industry-standard tools for Go development and are referenced for their intended purpose. - [COMMAND_EXECUTION]: Provides instructions for using standard Go toolchain commands, including
go run,go get, andgo tool gqlgen generate. These commands are used for project initialization and code generation as part of the normal development workflow. - [SAFE]: The skill actively promotes security best practices for API development, specifically including:
- N+1 Prevention: Recommending per-request DataLoaders in middleware to prevent resource exhaustion and data leakage.
- Authorization: Implementing HTTP middleware and schema directives to enforce access controls.
- Error Handling: Using error presenters to prevent leaking internal system details or SQL fragments to clients.
- Safety Caps: Implementing complexity limits and disabling introspection in production to protect against Denial-of-Service (DoS) and information disclosure attacks.
Audit Metadata