Skip to main content

apollo-server-patterns

Facilitates building production-ready GraphQL APIs with Apollo Server, focusing on schema design, resolvers, and federation.

Install this skill

or
61/100

Security score

The apollo-server-patterns skill was audited on Feb 9, 2026 and we found 15 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 83

Template literal with variable interpolation in command context

SourceSKILL.md
83console.log(`Server ready at ${url}`);
medium line 282

Template literal with variable interpolation in command context

SourceSKILL.md
282return this.get(`users/${id}`);
medium line 545

Template literal with variable interpolation in command context

SourceSKILL.md
545pubsub.publish(`COMMENT_ADDED_${postId}`, { commentAdded: comment });
medium line 558

Template literal with variable interpolation in command context

SourceSKILL.md
558pubsub.asyncIterator([`COMMENT_ADDED_${postId}`])
medium line 637

Template literal with variable interpolation in command context

SourceSKILL.md
637authDirectiveTypeDefs: `directive @${directiveName}(requires: Role = USER)
medium line 660

Template literal with variable interpolation in command context

SourceSKILL.md
660throw new Error(`Requires ${requires} role`);
low line 403

Access to .env file

SourceSKILL.md
403const decoded = jwt.verify(token, process.env.JWT_SECRET);
low line 278

External URL reference

SourceSKILL.md
278this.baseURL = 'https://api.example.com/';
low line 607

External URL reference

SourceSKILL.md
607console.log('Server running on http://localhost:4000/graphql');
low line 773

External URL reference

SourceSKILL.md
773@link(url: "https://specs.apollo.dev/federation/v2.0",
low line 813

External URL reference

SourceSKILL.md
813@link(url: "https://specs.apollo.dev/federation/v2.0",
low line 936

External URL reference

SourceSKILL.md
936- [Apollo Server Documentation](https://www.apollographql.com/docs/apollo-server/)
low line 937

External URL reference

SourceSKILL.md
937- [GraphQL Specification](https://spec.graphql.org/)
low line 938

External URL reference

SourceSKILL.md
938- [Apollo Federation](https://www.apollographql.com/docs/federation/)
low line 940

External URL reference

SourceSKILL.md
940- [GraphQL Best Practices](https://graphql.org/learn/best-practices/)
Scanned on Feb 9, 2026
View Security Dashboard
Installation guide →