Skip to main content

graphql-security

Enhances GraphQL API security with authentication, authorization, rate limiting, and input validation techniques.

Install this skill

or
89/100

Security score

The graphql-security skill was audited on Feb 12, 2026 and we found 7 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

low line 49

Access to .env file

SourceSKILL.md
49process.env.JWT_SECRET,
low line 55

Access to .env file

SourceSKILL.md
55process.env.JWT_REFRESH_SECRET,
low line 69

Access to .env file

SourceSKILL.md
69const payload = jwt.verify(token, process.env.JWT_SECRET);
low line 186

Access to .env file

SourceSKILL.md
186introspection: process.env.NODE_ENV !== 'production',
low line 235

Access to .env file

SourceSKILL.md
235if (process.env.NODE_ENV === 'production') {
low line 256

Access to .env file

SourceSKILL.md
256origin: process.env.ALLOWED_ORIGINS?.split(','),
medium line 217

Prompting for password/secret input

SourceSKILL.md
217password: validate.password(input.password),
Scanned on Feb 12, 2026
View Security Dashboard
Installation guide →