graphql-apollo-server
Teaches how to build scalable GraphQL servers using Apollo Server, including middleware integration and production best practices.
Install this skill
or
72/100
Security score
The graphql-apollo-server skill was audited on Feb 12, 2026 and we found 12 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 128
Template literal with variable interpolation in command context
SourceSKILL.md
| 128 | console.log(`Completed in ${Date.now() - start}ms`); |
medium line 261
Curl to non-GitHub URL
SourceSKILL.md
| 261 | curl http://localhost:4000/health |
medium line 264
Curl to non-GitHub URL
SourceSKILL.md
| 264 | curl -X POST http://localhost:4000/graphql \ |
medium line 269
Curl to non-GitHub URL
SourceSKILL.md
| 269 | curl -X POST http://localhost:4000/graphql \ |
low line 96
Access to .env file
SourceSKILL.md
| 96 | if (process.env.NODE_ENV === 'production') { |
low line 105
Access to .env file
SourceSKILL.md
| 105 | introspection: process.env.NODE_ENV !== 'production', |
low line 68
External URL reference
SourceSKILL.md
| 68 | cors({ origin: ['http://localhost:3000'], credentials: true }), |
low line 79
External URL reference
SourceSKILL.md
| 79 | console.log('Server ready at http://localhost:4000/graphql'); |
low line 169
External URL reference
SourceSKILL.md
| 169 | @link(url: "https://specs.apollo.dev/federation/v2.0", |
low line 261
External URL reference
SourceSKILL.md
| 261 | curl http://localhost:4000/health |
low line 264
External URL reference
SourceSKILL.md
| 264 | curl -X POST http://localhost:4000/graphql \ |
low line 269
External URL reference
SourceSKILL.md
| 269 | curl -X POST http://localhost:4000/graphql \ |
Scanned on Feb 12, 2026
View Security DashboardGitHub Stars 2
Rate this skill
Categorydevelopment
UpdatedMay 21, 2026
openclawgithub-copilotcodexchatgptcursorwindsurfclineroo-codeamptraeopencodegoosebackendapibackend-developerproduct-managergrowth-pmdevelopmentproduct
majiayu000/claude-skill-registry-data