graphql-inspector-ci
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS] (SAFE): The skill utilizes the standard
@graphql-inspector/clipackage and official GitHub Actions (e.g.,actions/checkout,actions/setup-node). These are trusted and necessary dependencies for the stated goal of GraphQL schema validation.- [COMMAND_EXECUTION] (SAFE): The shell scripts provided for CI/CD pipelines (diffing, validating, and auditing GraphQL schemas) are standard and perform operations directly related to the skill's purpose without requesting excessive privileges.- [CREDENTIALS_UNSAFE] (SAFE): The skill correctly demonstrates the use of placeholder secrets and environment variables (e.g.,${{ secrets.PROD_API_TOKEN }},$GITLAB_TOKEN) for authentication with external APIs, adhering to proper credential management practices.
Audit Metadata