Security audit
graphql-architect
Security checks for vulnerabilities and agentic risk
Overview
This is a GraphQL architecture guidance skill with only markdown instructions and no executable or hidden install behavior.
Reasonable to install for GraphQL architecture assistance. Use it in workspaces where sharing schema and service-boundary context with the agent is acceptable, and verify any generated architecture, performance, or security recommendations against your actual system constraints.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.