graphql-schema-designer
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were detected. The skill provides legitimate guidance for standard web development tasks.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install standard, well-known libraries from the official npm registry, including @apollo/server, graphql, graphql-tag, dataloader, and @graphql-codegen utilities. These are trusted ecosystem tools.
- [INDIRECT_PROMPT_INJECTION]: The skill outlines a standard architecture for processing external data via GraphQL API endpoints. * Ingestion points: Resolver functions in resolvers/user.ts and resolvers/post.ts receive and process arguments from API queries and mutations. * Boundary markers: Uses GraphQL schema types to define data structures; no specific LLM instruction delimiters are implemented for the data fields. * Capability inventory: The code templates include database access patterns and subscription mechanisms using pubsub. * Sanitization: The skill includes a best practices section that specifically recommends input validation and sanitization.
Audit Metadata