Extract GraphQL operations and field paths from JavaScript sources and introspection endpoints.
npx skills add https://github.com/pdstat/graphqlextractor --skill gqlextractor
Please help me install this Agent Skill. Skill: gqlextractor Source: https://github.com/pdstat/graphqlextractor/tree/main Command: npx skills add https://github.com/pdstat/graphqlextractor --skill gqlextractor
GraphQL documents are often embedded inside JavaScript code and need runtime-friendly tooling to extract queries, mutations, and field paths without running the application or manually parsing files.
Run gqlextractor against your JavaScript sources and a GraphQL introspection endpoint to extract operations, requests, and field paths.
High-intent search queries and answers about installing and using this skill.
You can extract GraphQL queries from JavaScript sources by parsing template literals, string literals, and object literals to pull operations, requests, and field paths without executing the application code.
Yes, you can fetch and parse GraphQL schemas via remote introspection endpoints to map available field paths and operations for analysis and vulnerability testing.
Embedded GraphQL documents are typically found in template literals, string literals, escaped JSON documents, and JavaScript object literals within source code files.
You can discover GraphQL field paths by extracting operations and requests from local JavaScript files or mapping them directly from a fetched introspection schema endpoint.
No, extracting GraphQL operations from code does not require running the application; static parsing of JavaScript sources and schema introspection endpoints handles discovery independently.
Yes, extracted GraphQL operations, requests, and field paths are directly applicable to code review, vulnerability testing, and data discovery workflows across local and remote sources.
wgpsecIdentify GraphQL endpoints and test introspection, injection, and authorization bypass.
YukiIto1999Automate API security assessment across GraphQL, REST, WebSocket, and Web-LLM interfaces.
dmzoneillVerify database migration correctness across PostgreSQL, MySQL, and SQLite.
JingyueCongAnalyze PCAP files to identify communication issues and security anomalies.
