The Agent Skills Directory

[SAFE]: The skill is entirely instructional and provides examples for security researchers to manually test GraphQL endpoints. It does not contain any malicious scripts or automated attack payloads.
[COMMAND_EXECUTION]: The documentation includes standard curl command examples for API introspection and diagnostic testing against a user-defined target URL.
[EXTERNAL_DOWNLOADS]: The skill references established open-source security tools (such as graphql-cop, clairvoyance, and graphw00f) as recommended utilities for GraphQL analysis. These tools are mentioned for informational purposes and are not installed or executed by the skill itself.

attacking-graphql