graphql-architect
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is entirely instructional and does not contain any malicious patterns such as command execution, credential harvesting, or unauthorized network operations.
- [NO_CODE]: No scripts, executables, or dynamic code components are included in the skill. It consists exclusively of markdown instructions and documentation.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external GraphQL schemas and resolvers, which represents an ingestion surface for untrusted data.
- Ingestion points: Analysis of user-provided GraphQL schemas (SDL) and resolver implementation logic as described in SKILL.md.
- Boundary markers: Not present; the instructions do not define specific delimiters for separating user input from agent instructions.
- Capability inventory: The skill does not use or request access to any dangerous capabilities such as file writing, shell execution, or network exfiltration.
- Sanitization: No specific sanitization or filtering logic is prescribed for the external data being processed.
Audit Metadata