implement-graphql
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill contains no malicious patterns and focuses on standard Ruby on Rails GraphQL development practices including N+1 prevention and field-level authorization.
- [SAFE]: The skill explicitly instructs developers to implement security safeguards such as disabling introspection in production and setting maximum query depth and complexity limits in the AppSchema configuration.
- [INDIRECT_PROMPT_INJECTION]: This skill handles external code as data. Ingestion points include existing Ruby and GraphQL files. Boundary markers are provided via a hard-gate checklist in SKILL.md. Capability inventory includes file system modifications and test execution. Sanitization is achieved through recommended field-level guards and structured error handling.
Audit Metadata