How does it help with GraphQL security?

It reviews your configuration for query depth limits, complexity estimation, and rate limiting to protect your server from resource exhaustion and DoS attacks.

Can it detect N+1 problems in specific ORMs?

Yes, it identifies N+1 patterns across various ORMs like Prisma, TypeORM, and Drizzle, recommending batching with DataLoader or JOIN-based optimization strategies.

Does it support both SDL-first and code-first schemas?

Yes, it is designed to analyze both Schema Definition Language (SDL) files and code-first implementations using decorators like those in NestJS or TypeGraphQL.

Can it help with pagination implementation?

Absolutely. It checks for unbounded lists and recommends implementing Relay-style cursor pagination or optimized offset pagination for better performance.

GraphQL Reviewer

Name: GraphQL Reviewer
Author: physics91

byphysics91

API 开发

Conducts comprehensive audits of GraphQL schemas and resolvers to identify performance bottlenecks, security risks, and design flaws.

关于

The GraphQL Reviewer skill provides automated, expert-level feedback for GraphQL API development. It specializes in detecting critical performance issues like the N+1 query problem, enforcing security measures through query complexity and depth limits, and ensuring schema design follows best practices for pagination and error handling. Whether you are using Apollo Server, GraphQL Yoga, or NestJS, this skill helps developers build scalable, secure, and production-ready GraphQL services by providing actionable code improvements and implementation patterns like DataLoader and Relay-style pagination.

主要功能

Security audits for internal ID exposure and input validation
0 GitHub stars
Best-practice implementation of structured error handling
Schema design review for Relay-style pagination and non-null defaults
Query complexity and depth limit analysis to prevent DoS attacks
Automatic N+1 query detection and DataLoader implementation advice

使用场景

Hardening GraphQL APIs against resource exhaustion attacks
Refactoring legacy SDL-first or code-first schemas
Optimizing database performance in GraphQL resolvers

关于

主要功能

Security audits for internal ID exposure and input validation
0 GitHub stars
Best-practice implementation of structured error handling
Schema design review for Relay-style pagination and non-null defaults
Query complexity and depth limit analysis to prevent DoS attacks
Automatic N+1 query detection and DataLoader implementation advice

使用场景

Hardening GraphQL APIs against resource exhaustion attacks
Refactoring legacy SDL-first or code-first schemas
Optimizing database performance in GraphQL resolvers