graphql

Installation
Summary

GraphQL schema design, resolver patterns, and production safety best practices.

  • Covers nine core capabilities including schema design, resolvers, federation, subscriptions, DataLoader, code generation, and Apollo tooling for both server and client
  • Emphasizes critical production hazards: N+1 query problems, unlimited query depth leading to DoS, introspection exposure, and improper authorization scoping
  • Provides patterns for type-safe schemas with intentional nullability, batch query optimization via DataLoader, and normalized client-side caching
  • Includes sharp-edge guidance on field-level authorization, query cost analysis, and subscription lifecycle management
SKILL.md

GraphQL

GraphQL gives clients exactly the data they need - no more, no less. One endpoint, typed schema, introspection. But the flexibility that makes it powerful also makes it dangerous. Without proper controls, clients can craft queries that bring down your server.

This skill covers schema design, resolvers, DataLoader for N+1 prevention, federation for microservices, and client integration with Apollo/urql. Key insight: GraphQL is a contract. The schema is the API documentation. Design it carefully.

2025 lesson: GraphQL isn't always the answer. For simple CRUD, REST is simpler. For high-performance public APIs, REST with caching wins. Use GraphQL when you have complex data relationships and diverse client needs.

Principles

  • Schema-first design - the schema is the contract
Related skills
Installs
517
GitHub Stars
37.3K
First Seen
Jan 19, 2026