graphql
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides industry-standard development patterns for GraphQL APIs, focusing on schema design, performance, and security.
- [SAFE]: Recommends explicit security measures such as query depth and complexity limits to prevent resource exhaustion and Denial of Service (DoS) attacks.
- [SAFE]: Promotes security best practices by advising against the exposure of sequential internal database IDs to prevent object enumeration attacks.
- [SAFE]: Includes guidance on preventing data leakage by ensuring DataLoaders are scoped per-request rather than shared globally.
- [SAFE]: Provides appropriate security advice for production environments, such as disabling schema introspection and securing WebSocket connections for subscriptions.
Audit Metadata