performing-graphql-depth-limit-attack

This skill is internally consistent, but it is a high-risk offensive security skill because it equips an AI agent to perform GraphQL denial-of-service testing against target APIs. No strong malware or credential-theft signals appear, yet the autonomous attack capability and direct impact on external systems make the overall security risk high.

The fragment is a readable GraphQL security assessment/DoS testing utility rather than evident malware. It intentionally generates potentially expensive requests and can send supplied authorization credentials to arbitrary URLs, so it should be used only with explicit authorization and controlled limits. No malicious persistence, exfiltration, command execution, hardcoded secrets, or obfuscated payloads are present.