graphql
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional, providing guidance on schema design, resolvers, and client-side integration without any malicious instructions.
- [SAFE]: It explicitly identifies and provides remediations for several high-severity security risks common in GraphQL, including query depth exhaustion (DoS), sensitive data exposure via introspection, and unauthorized field access.
- [SAFE]: The code snippets demonstrate secure patterns such as using DataLoader for performance and batching, implementing depth limits for query validation, and using union types for explicit error handling.
- [SAFE]: All referenced Node.js packages and external tools are well-known, standard libraries within the GraphQL ecosystem (e.g., Apollo Server, GraphQL Codegen, DataLoader).
Audit Metadata