“graphql”的搜索结果

Detect GraphQL injection vulnerabilities in a codebase using a three-phase approach: recon (confirm GraphQL usage and find unsafe operation document assembly sites), batched verify (trace user input to those sites in parallel subagents, up to 3 candidate sites each), and merge (consolidate batch results). Requires sast/architecture.md (run sast-analysis first). Outputs findings to sast/graphql-results.md. If no GraphQL technology is found in Phase 1, later phases are skipped. Use when asked to find GraphQL injection, unsafe GraphQL document construction, or operation string injection bugs.

中文简介正在准备中。当前显示原文说明。

The GraphQL pipeline for Skmtc generators — authoring generators whose input schema is GraphQL SDL rather than OpenAPI. Covers `toGqlOperationEntry`, `GqlOperation`, `synthesizeArgsObject` (mutation args -> object schema), the GQL enrichment routing (`[id][rootKind][fieldName][variant]` — two nested subject keys where OAS has path+method), the `to<Lang>GqlOperationProjectionBase` companion factories, and the `GeneratorKey` shape `id|rootKind|fieldName|variant`. Use this skill ALONGSIDE `skmtc-generator` whenever the schema source is GraphQL SDL or the task mentions "GraphQL", "SDL", "GqlOperation", "toGqlOperationEntry", or GraphQL query/mutation generators. Engine rules (producers, register/insert, the axioms) stay in `skmtc-generator`; this skill carries only what differs for GraphQL.

中文简介正在准备中。当前显示原文说明。

Choose between REST, GraphQL, and tRPC based on who uses an API and how it is deployed. Define consistent responses, pagination, authentication, and versioning, supported by concrete request examples and failure cases.

中文简介正在准备中。当前显示英语简介。

• Choose an API style for known clients
• Standardize response and error formats
• Design pagination for changing data

Assess authorized APIs through a ten-stage workflow covering endpoint discovery, authentication, access permissions, input handling, and request limits. Collect reproducible evidence and turn findings into regression checks that can run in a development pipeline.

中文简介正在准备中。当前显示英语简介。

• Review API authentication and access permissions
• Assess GraphQL and WebSocket security
• Check request limits and unintended data exposure

Hunt fintech-specific GraphQL vulnerabilities: money-movement mutations (transfers, redemptions, withdrawals, card top-ups), ledger/balance/portfolio query IDOR, decimal-precision and rounding abuse, idempotency-key bypass enabling double-spend, KYC/PII field-level authorization gaps, and admin-override mutations reachable via mass assignment. Distinct from hunt-graphql, which owns generic GraphQL discovery and IDOR/mutation methodology — this skill owns the delta introduced when a GraphQL layer sits in front of a ledger, wallet, payments, banking, brokerage, or lending backend, where a resolver bug moves real money instead of just leaking data. Use when hunting a fintech, banking, payments, wallet, neobank, brokerage, or lending target that exposes a GraphQL API, or when a schema/response includes balance, transfer, ledger, redeem, quote, KYC, or account-linking fields.

中文简介正在准备中。当前显示原文说明。

Implements GraphQL APIs in Golang using gqlgen or graphql-go. Apply when building GraphQL servers, designing schemas, writing resolvers, handling subscriptions, or integrating GraphQL with existing Go HTTP services. Also apply when the codebase imports `github.com/99designs/gqlgen` or `github.com/graph-gophers/graphql-go`.

中文简介正在准备中。当前显示原文说明。

Create integration tests for syncable metadata entities in Twenty itself. Cover invalid inputs, validation errors, and successful data operations, using reusable GraphQL request helpers, error snapshots, and cleanup routines to organize the test suite.

中文简介正在准备中。当前显示英语简介。

• Add integration tests for a new syncable entity
• Test required fields, duplicates, and invalid references
• Verify successful creation, updates, and deletion

Design, build, debug, and optimize connections to external APIs. The skill covers REST, GraphQL, event notifications through webhooks, authentication, retries, request limits, and logging to help produce integrations whose failures can be traced.

中文简介正在准备中。当前显示英语简介。

• Designing a new external API integration
• Building an API client with retries and authentication
• Investigating failed requests or missing results

Design APIs and interfaces between parts of an application with clear input and output types, consistent errors, and predictable names. The guidance helps you extend existing interfaces while preserving compatibility for the code that uses them.

中文简介正在准备中。当前显示英语简介。

• Designing new REST or GraphQL endpoints
• Defining contracts between frontend and backend
• Reviewing changes to a public interface

Design REST or GraphQL APIs by defining data relationships, requests, responses, and authentication. Produce OpenAPI specifications, machine-readable API descriptions, with consistent errors, pagination, and versioning plans, then validate contracts using a mock server.

中文简介正在准备中。当前显示英语简介。

• Designing a new API from business requirements
• Creating and validating OpenAPI specifications
• Standardizing errors and paginated responses

Query gnomAD for variant frequencies, gene constraint measures, and effects on gene transcripts. Get concise Markdown summaries from focused requests, with options to return machine-readable JSON or save the full response to a file.

中文简介正在准备中。当前显示英语简介。

• Checking the frequency of a specific genetic variant
• Retrieving gene constraint measures
• Looking up variant effects on gene transcripts

Retrieve focused information from CIViC for cancer variant interpretation. It uses GraphQL, a way to request specific data fields, to inspect available data structures and turn targeted evidence results into concise summaries.

中文简介正在准备中。当前显示英语简介。

• Retrieve CIViC evidence for a specific cancer variant
• Inspect available CIViC data fields
• Get concise Markdown summaries of query results

Build and troubleshoot Shopify themes, apps, and custom storefronts with task-specific references. It covers Liquid, Shopify’s template language, API data access, custom business rules, and performance improvements, using API version 2026-01.

中文简介正在准备中。当前显示英语简介。

• Write and debug Liquid templates
• Customize OS 2.0 themes
• Build Shopify apps and API integrations

Build forms with Formik and yup, a library for defining input validation rules. Apply field errors, submission feedback, edit detection, and step-specific validation to login screens, editing forms, and forms split across multiple steps.

中文简介正在准备中。当前显示英语简介。

• Building login and registration forms
• Adding conditional input validation
• Editing existing records with change detection

GraphQL API specialist for schema design, resolvers, federation, and performance optimizationUse when "graphql, schema design, resolvers, federation, apollo, relay, dataloader, n+1 problem, graphql security, graphql, api, schema, resolvers, federation, subscriptions, apollo, relay, dataloader" mentioned.

中文简介正在准备中。当前显示原文说明。

DataLoader, subscriptions, federation, and schema stitching for GraphQL APIs. Activate on: GraphQL, DataLoader, subscription, federation, schema stitching, resolver, SDL, Apollo, Yoga. NOT for: REST API design (use api-architect), frontend GraphQL clients (use relevant frontend skill).

中文简介正在准备中。当前显示原文说明。

Diagnose and eliminate the GraphQL N+1 resolver explosion using Facebook DataLoader's per-request batching, plus the second-order defenses (persisted queries, depth limits, cost analysis). Use when a GraphQL query that returns N items in a list triggers N+1 database round trips, when designing nested resolvers that load associations, when a list query times out under load, or when you need to budget query cost before resolvers run. NOT for REST-style endpoint design (use api-versioning-strategy), generic database query optimization (use database-query-optimizer), or schema design (use graphql-server-architect).

中文简介正在准备中。当前显示原文说明。

Performs GraphQL introspection attacks to Şunu çıkar: full API schema including types, queries, mutations, subscriptions, and field definitions from GraphQL endpoints. The tester uses introspection queries to map the attack surface, identifies sensitive fields and mutations, tests for query depth and complexity limits, and exploits GraphQL-specific vulnerabilities including batching attacks, alias-based brute force, and nested query DoS. Activates for requests involving GraphQL security testi...

中文简介正在准备中。当前显示原文说明。

Migrates REST APIs to GraphQL incrementally with schema stitching, REST datasources, and gradual endpoint migration. Use when users request "migrate to GraphQL", "REST to GraphQL", "GraphQL wrapper", or "API modernization".

中文简介正在准备中。当前显示原文说明。

通过API查询和更新Shopify的商品、订单、客户及库存，使用curl获取所需数据，支持价格修改、分地点库存调整、自定义字段读写和批量数据导出。

• 搜索商品并更新价格
• 获取订单和客户信息
• 查询并调整各地点库存

Design and implement backend APIs, the interfaces applications use to exchange data. Cover authentication, input validation, error handling, tests, and documentation, while consulting stored implementation patterns and recording results for reuse in later development tasks.

中文简介正在准备中。当前显示英语简介。

• Add login and registration endpoints
• Build product create, read, update, and delete APIs
• Design REST or GraphQL interfaces

Assess web applications and APIs for SQL injection, where input changes database queries. The skill covers finding vulnerable inputs, testing different database systems, automating checks, and documenting findings with remediation suggestions.

中文简介正在准备中。当前显示英语简介。

• Assessing web application inputs for SQL injection
• Reviewing GraphQL and WebSocket injection risks
• Combining SQLmap automation with manual verification

You are an expert in Apollo Client, the comprehensive GraphQL client for React applications. You help developers fetch data with GraphQL queries and mutations, manage local and remote state with Apollo's normalized cache, implement optimistic UI updates, handle pagination, and configure authentication — providing a complete data management solution for GraphQL-powered apps.

中文简介正在准备中。当前显示原文说明。

Build and configure a GraphQL API backed by Neo4j using @neo4j/graphql v7 (current) or v5 (LTS). Covers Neo4jGraphQL constructor, getSchema(), assertIndexesAndConstraints(), type definitions with @node, @relationship (IN/OUT/UNDIRECTED), @cypher for custom resolvers, @authorization/@authentication for JWT/JWKS security, auto-generated queries/mutations, OGM programmatic access, subscriptions via CDC, and Apollo Federation. Use when writing typeDefs, securing fields, or wiring Neo4j to Apollo Server. Does NOT handle raw Cypher outside resolvers — use neo4j-cypher-skill. Does NOT cover Spring Data Neo4j entity mapping — use neo4j-spring-data-skill.

中文简介正在准备中。当前显示原文说明。