building-graphql-server
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard architectural patterns and instructions for GraphQL API development, including the use of DataLoaders for N+1 prevention and complexity analysis for security.
- [CREDENTIALS_SAFE]: Example code in
references/examples.mdcorrectly uses environment variable placeholders (e.g.,$TOKEN) for authentication headers rather than hardcoding sensitive credentials. - [EXTERNAL_DOWNLOADS]: All external resource links point to well-known and trusted technology documentation (Apollo, GraphQL Spec, GitHub) or the official domains of the skill's author (jeremylongshore.com, intentsolutions.io).
- [COMMAND_EXECUTION]: The skill uses a scoped Bash tool (
api:graphql-*) intended for generating framework scaffolding, which is a common and legitimate development practice restricted by the skill's frontmatter configuration.
Audit Metadata