graphql-api-design
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily a collection of architectural guidelines and code templates (TypeScript, GraphQL, YAML) for building GraphQL services.
- [SAFE]: It includes explicit instructions and implementations for security best practices, including:
- Query complexity analysis to prevent resource exhaustion attacks.
- Query depth limiting to stop deeply nested query attacks.
- Context-based authentication and directive-based authorization.
- Proper error handling that masks internal details in production.
- [SAFE]: Configuration files (e.g.,
apollo-studio.yaml,federation-config.yaml) correctly utilize environment variable placeholders (e.g.,${APOLLO_KEY},${REDIS_URL}) for sensitive values, adhering to secret management best practices. - [EXTERNAL_DOWNLOADS]: References official documentation and well-known services including Apollo GraphQL, Redis, Sentry, Jaeger, and PagerDuty. These are documented as standard industry integrations and do not pose a security risk in the context provided.
Audit Metadata