graphql-yoga

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard documentation and boilerplate code for the GraphQL Yoga library. The examples use secure patterns such as environment-variable-based error masking and development-only GraphiQL access.
  • [SAFE]: Recommended plugins include @graphql-yoga/plugin-rate-limiter and envelop-depth-limit, which are established industry tools for preventing denial-of-service attacks on GraphQL endpoints.
  • [SAFE]: The installation command npm install graphql-yoga graphql targets well-known packages from the official NPM registry.
  • [SAFE]: No suspicious patterns such as prompt injection, data exfiltration, or obfuscation were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 01:55 PM
Security Audit — agent-trust-hub — graphql-yoga