graphql-api-development
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill includes a Python validation script (
scripts/validate_skill.py) designed to perform local static analysis on GraphQL schema and resolver files. It utilizes the standardjsonschemalibrary and contains no network, write, or privilege escalation capabilities. - [SAFE]: The instructions and reference documentation (
references/graphql-patterns.md) promote industry-standard security practices, such as implementing depth limiting, query cost analysis, and per-operation rate limiting to prevent Denial of Service (DoS) attacks. - [SAFE]: The skill references legitimate, well-known development resources from Apollo GraphQL, Relay, and the author's official GitHub repository (
JPeetz/agent-skills) for architectural guidance. - [SAFE]: Secret detection patterns included in the validation script are intended to identify hardcoded credentials in user code during the development process and do not represent hardcoded secrets within the skill itself.
Audit Metadata