Detect GraphQL vulnerabilities in schemas, resolvers, and dependencies.
npx skills add https://github.com/ersinkoc/security-check --skill sc-graphql
Please help me install this Agent Skill. Skill: sc-graphql Source: https://github.com/ersinkoc/security-check/tree/main/skills/sc-graphql Command: npx skills add https://github.com/ersinkoc/security-check --skill sc-graphql
GraphQL security vulnerabilities such as query injection, introspection leakage, and misconfigurations in authorization checks across resolvers threaten production GraphQL services.
Provide your GraphQL schema and resolvers to begin automated vulnerability analysis.
High-intent search queries and answers about installing and using this skill.
Detect GraphQL security vulnerabilities by analyzing schemas and resolvers to identify injection, introspection exposure, depth/complexity issues, and authorization bypass. Automated checks provide actionable findings with remediation guidance and example payloads to reproduce issues.
Yes, Apollo Server and graphql-yoga resolvers are fully supported for authorization bypass scanning. The analysis enforces proper resolver authorization checks across popular Node.js runtimes to prevent unauthorized data access during development and CI.
Prevent GraphQL batching abuse and query depth attacks by enforcing depth and complexity limits. Automated vulnerability analysis identifies these misconfigurations and provides actionable remediation guidance to secure your GraphQL service.
Yes, this GraphQL vulnerability scanner works with Strawberry, Graphene, gqlgen, and HotChocolate. It performs phase-agnostic checks across schemas and resolvers during development and CI to minimize false positives for these runtimes.
Secure GraphQL error handling by enforcing safe error messaging and secure error handling practices. The vulnerability analysis detects misconfigurations that leak sensitive data and provides remediation guidance to fix error responses.
Disable GraphQL introspection in production to prevent attackers from mapping your schema structure. The analysis enforces introspection control checks, identifying exposure leaks and providing remediation guidance to secure your production GraphQL endpoints.
ntaksh42Generate GraphQL schemas and JavaScript resolver implementations from data models.
langbyyiIdentify GraphQL API vulnerabilities including hidden parameters and authorization gaps.
fatihkanDetect GraphQL vulnerabilities in schemas, resolvers, and dependencies.
uphiagoDetect FastAPI-specific vulnerabilities including OpenAPI schema exposure and DI authorization gaps.
