graphql-schema
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill utilizes instructional directives such as 'Core Rules' and 'CRITICAL' to establish coding conventions for the AI to follow. These are used to enforce architecture patterns and do not attempt to bypass safety guidelines or override system prompts.
- [COMMAND_EXECUTION]: The skill references standard project commands such as 'npm run gql:typegen' and 'npm run sync-types'. These are routine developer workflows for GraphQL development to generate type definitions and synchronize schemas.
- [EXTERNAL_DOWNLOADS]: The 'sync-types' command typically involves fetching a schema definition from a GraphQL endpoint. This is a standard integration practice and does not involve the execution of unverified remote code.
- [DATA_EXFILTRATION]: No patterns of unauthorized data access or exfiltration were identified. The skill focuses on application structure, local build processes, and user interface feedback loops.
Audit Metadata