The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references several standard Node.js packages for GraphQL development, including @apollo/server, dataloader, graphql-ws, and express. It also fetches a metadata schema from the vendor's GitHub repository (github.com/agents-inc). These are standard dependencies for the skill's stated purpose.- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for ingesting and processing external data via GraphQL resolver arguments and REST API responses. It mitigates injection risks by instructing the implementation of strict schema validation and response sanitization using formatError and encodeURIComponent for dynamic URL segments.
Ingestion points: Resolver arguments (args in SKILL.md), HTTP headers (token in examples/core.md), and REST API responses (RESTDataSource in examples/data-sources.md).
Boundary markers: Recommends using formatError to separate internal error details from client-facing messages and GraphQL schema validation to enforce input structure.
Capability inventory: Includes network operations via RESTDataSource (fetching from external APIs) and database queries within data sources.
Sanitization: Explicitly mandates the use of encodeURIComponent on dynamic path segments to prevent path traversal vulnerabilities.

api-graphql-apollo-server