graphql-api-design

Pass

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is primarily a collection of architectural guidelines and code templates (TypeScript, GraphQL, YAML) for building GraphQL services.
  • [SAFE]: It includes explicit instructions and implementations for security best practices, including:
  • Query complexity analysis to prevent resource exhaustion attacks.
  • Query depth limiting to stop deeply nested query attacks.
  • Context-based authentication and directive-based authorization.
  • Proper error handling that masks internal details in production.
  • [SAFE]: Configuration files (e.g., apollo-studio.yaml, federation-config.yaml) correctly utilize environment variable placeholders (e.g., ${APOLLO_KEY}, ${REDIS_URL}) for sensitive values, adhering to secret management best practices.
  • [EXTERNAL_DOWNLOADS]: References official documentation and well-known services including Apollo GraphQL, Redis, Sentry, Jaeger, and PagerDuty. These are documented as standard industry integrations and do not pose a security risk in the context provided.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 22, 2026, 09:57 PM
Security Audit — agent-trust-hub — graphql-api-design