The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to use CLI tools for schema verification and linting. Specifically, it guides the use of npx @graphql-eslint/eslint-plugin for static analysis of documents and npx @graphql-inspector/cli diff for breaking change detection. These are standard developer tools used within their intended purpose.
[EXTERNAL_DOWNLOADS]: The workflows suggest using tools from the NPM registry via npx. The referenced packages are well-known community standards for GraphQL development. The skill also references documentation and repositories from trusted organizations including the GraphQL Foundation, Apollo GraphQL, and the Guild (GraphQL Yoga).
[INDIRECT_PROMPT_INJECTION]: The skill operates by ingesting and analyzing user-provided GraphQL schemas and operation documents. While this presents a surface for processing untrusted content, the skill uses these inputs for structural analysis (linting, diffing) rather than direct execution of embedded instructions. The severity is low as it relies on standard parsing libraries.

graphql