graphql-api
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to generate local project configuration files (
.gitignoreand.pre-commit-config.yaml) using standard shell redirection. These commands are typical for project initialization and do not perform unauthorized actions. - [INDIRECT_PROMPT_INJECTION]: As the skill involves building APIs that process external data, it naturally involves an attack surface for indirect injection. However, the skill provides a security checklist and code examples (such as
limit_complexityandlimit_depth) to mitigate these risks. - [EXTERNAL_DOWNLOADS]: The skill includes configuration for
pre-commithooks that reference well-known security tools from official organizations on GitHub.
Audit Metadata