How does it help with GraphQL security?

It reviews your configuration for query depth limits, complexity estimation, and rate limiting to protect your server from resource exhaustion and DoS attacks.

Can it detect N+1 problems in specific ORMs?

Yes, it identifies N+1 patterns across various ORMs like Prisma, TypeORM, and Drizzle, recommending batching with DataLoader or JOIN-based optimization strategies.

Does it support both SDL-first and code-first schemas?

Yes, it is designed to analyze both Schema Definition Language (SDL) files and code-first implementations using decorators like those in NestJS or TypeGraphQL.

Can it help with pagination implementation?

Absolutely. It checks for unbounded lists and recommends implementing Relay-style cursor pagination or optimized offset pagination for better performance.

GraphQL Reviewer

Name: GraphQL Reviewer
Author: physics91

byphysics91

0•

API開発

Conducts comprehensive audits of GraphQL schemas and resolvers to identify performance bottlenecks, security risks, and design flaws.

The GraphQL Reviewer skill provides automated, expert-level feedback for GraphQL API development. It specializes in detecting critical performance issues like the N+1 query problem, enforcing security measures through query complexity and depth limits, and ensuring schema design follows best practices for pagination and error handling. Whether you are using Apollo Server, GraphQL Yoga, or NestJS, this skill helps developers build scalable, secure, and production-ready GraphQL services by providing actionable code improvements and implementation patterns like DataLoader and Relay-style pagination.

主な機能

01Security audits for internal ID exposure and input validation

020 GitHub stars

03Best-practice implementation of structured error handling

04Schema design review for Relay-style pagination and non-null defaults

05Query complexity and depth limit analysis to prevent DoS attacks

06Automatic N+1 query detection and DataLoader implementation advice

ユースケース

01Hardening GraphQL APIs against resource exhaustion attacks

02Refactoring legacy SDL-first or code-first schemas

03Optimizing database performance in GraphQL resolvers

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add physics91/claude-vibe graphql-reviewer

For use in Claude.ai and ChatGPT

Download Skill