apollo-server-tests
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and code snippets for using standard GraphQL testing tools such as
@apollo/server'sexecuteOperationandsupertestfor HTTP-layer verification. - [SAFE]: The evaluation datasets (
evals/) contain complex, realistic scenarios designed to test an agent's ability to identify and remediate security gaps like misconfigured CORS origins and exposed introspection endpoints in production environments. - [SAFE]: All identified dependencies in the skill's examples and evaluation task files are well-known, legitimate Node.js libraries (e.g.,
@apollo/server,express,graphql-ws). - [SAFE]: The skill specifically promotes security best practices, such as asserting that introspection is disabled and that schema details are hidden from client errors in production configurations.
- [SAFE]: There are no detected instances of prompt injection, data exfiltration, or obfuscation within the documentation or the evaluation materials.
Audit Metadata