api-design-graphql
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill focuses on providing architectural guidance and contract design for GraphQL APIs.
- [COMMAND_EXECUTION]: Includes an optional instruction to run a local Python script (validate_api_contract.py) for manifest validation. This script is part of the local skill environment and does not perform network operations or download external code.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external GraphQL schemas and manifest files. * Ingestion points: Manifest files and GraphQL SDL/resolver diffs. * Boundary markers: None explicitly defined. * Capability inventory: Execution of a local Python validation script. * Sanitization: Not specified; relies on the validation script's implementation.
Audit Metadata