GraphQL Security Auditor

This skill empowers Claude to perform deep security audits of GraphQL APIs by scanning schema definitions and resolver implementations for common attack vectors. It identifies high-risk configurations such as enabled introspection in production, lack of query depth or complexity limits, and batching abuse, while also tracing field-level authorization to ensure sensitive data is protected. By integrating with scanners like Semgrep and GraphQL Cop, it provides actionable remediation steps and code diffs to harden your API against Denial of Service and unauthorized data exposure.

Key Features

Use Cases