graphql-yoga-tests
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious behavior, prompt injections, or data exfiltration patterns were detected. The skill instructions focus on legitimate unit and integration testing workflows for GraphQL servers.
- [EXTERNAL_DOWNLOADS]: The skill references and installs standard Node.js packages such as
graphql-yoga,fastify, andmercurius. These dependencies, along with documentation links tothe-guild.devand GitHub, are official resources for the technologies described. - [INDIRECT_PROMPT_INJECTION]: While the skill describes methods for processing GraphQL queries which are an entry point for untrusted data, it specifically provides patterns for mitigation, such as error masking and introspection disabling, and does not exhibit exploitable capabilities.
Audit Metadata