Skip to main content

lang-graphql-dev

Covers foundational GraphQL patterns for schema design, queries, mutations, and subscriptions, essential for building GraphQL APIs.

Install this skill

or
73/100

Security score

The lang-graphql-dev skill was audited on Feb 12, 2026 and we found 11 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 1102

Template literal with variable interpolation in command context

SourceSKILL.md
1102return context.pubsub.asyncIterator([`POST_UPDATED_${id}`]);
medium line 1129

Template literal with variable interpolation in command context

SourceSKILL.md
1129return `${user.firstName} ${user.lastName}`;
medium line 1600

Template literal with variable interpolation in command context

SourceSKILL.md
1600return Buffer.from(`cursor:${offset}`).toString('base64');
medium line 1801

Template literal with variable interpolation in command context

SourceSKILL.md
1801return Buffer.from(`${type}:${id}`).toString('base64');
low line 1758

Access to .env file

SourceSKILL.md
1758introspection: process.env.NODE_ENV !== 'production'
low line 1600

Buffer.from base64 decode

SourceSKILL.md
1600return Buffer.from(`cursor:${offset}`).toString('base64');
low line 1805

Buffer.from base64 decode

SourceSKILL.md
1805const [type, id] = Buffer.from(globalId, 'base64').toString().split(':');
low line 1970

External URL reference

SourceSKILL.md
1970- [GraphQL Specification](https://spec.graphql.org/)
low line 1971

External URL reference

SourceSKILL.md
1971- [GraphQL.org](https://graphql.org/)
low line 1972

External URL reference

SourceSKILL.md
1972- [Apollo Server Documentation](https://www.apollographql.com/docs/apollo-server/)
low line 1973

External URL reference

SourceSKILL.md
1973- [GraphQL Tools](https://www.graphql-tools.com/)
Scanned on Feb 12, 2026
View Security Dashboard