graphql-federation-offering
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional and does not contain any executable scripts, binaries, or automated tool invocations that could pose a risk to the host environment.
- [SAFE]: The instructions prioritize a "secure-by-default" posture for platform architecture, explicitly warning against high-risk patterns such as composing unvetted partner subgraphs into production graphs or forwarding sensitive client headers (Authorization/Cookies) to third parties.
- [SAFE]: No obfuscation, prompt injection, or credential exposure patterns were identified in any of the provided documentation or evaluation files.
- [SAFE]: External references are limited to well-known technology providers (Apollo, Shopify, Atlassian, Hasura, etc.) used for case studies and architectural patterns, adhering to safe documentation practices.
Audit Metadata