Best agent skills for GraphQL
We found 178 agent skills for GraphQL in the catalog; these are the 15 that rank highest. The order comes from our rank, which weighs adoption, freshness, documentation and publisher identity. Nobody can pay for a place on this list. webiny-custom-graphql-api, hunt-idor and rust-best-practices lead it. api-design-principles comes from the largest repository here (48,428 stars). 8 of the 15 had activity in the last 30 days. Each entry lists why it made the list and links to its install page.
Updated Oct 26, 2026 · Built from catalog data; how we rank and grade
Top 15 of 178
- 1
Adding custom GraphQL queries and mutations using GraphQLSchemaFactory.
- Repository has 8K stars
- Active in the last 30 days
★ 8KLast active Oct 20, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 2hunt-idor
Encod3d-Sec
IDOR / BOLA hunting - two-account methodology, identifier discovery and UUID leak chaining, the trusted-identifier test, GraphQL node and nested-object IDOR…
- Open source (MIT)
★ 335Last active Jul 27, 2026Claude Code, Claude apps, Codex, Cursor +6
BFreshness: B–Security: not graded yet - 3rust-best-practices
apollographql
Idiomatic Rust guide based on Apollo GraphQL's best practices handbook.
- Open source (MIT)
★ 125Last active Aug 9, 2026Claude Code, Claude apps, Codex, Cursor +6
BFreshness: B–Security: not graded yet - 4hunt-api
Encod3d-Sec
API attack hunting (REST / GraphQL / gRPC) - BOLA/IDOR, BFLA, mass assignment, excessive data exposure, auth/JWT, introspection + batching, rate-limit abuse.
- Open source (MIT)
★ 335Last active Jul 27, 2026Claude Code, Claude apps, Codex, Cursor +6
BFreshness: B–Security: not graded yet - 5graphql-and-hidden-parameters
langbyyi
GraphQL and hidden parameter testing playbook.
- Active in the last 30 days
- Open source (Apache-2.0)
★ 131Last active Oct 16, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 6api-security
transilienceai
API security testing - GraphQL, REST API, WebSocket, and Web-LLM attack techniques.
- Open source (MIT)
★ 591Last active Jul 26, 2026Claude Code, Claude apps, Codex, Cursor +6
CFreshness: C–Security: not graded yet - 7hello-api
hellowind777
构建、修改或审查 REST API、GraphQL 端点、webhook、中间件、请求/响应处理、API 版本管理、限流或分页时使用。
★ 707Last active Jul 9, 2026Claude Code, Claude apps, Codex, Cursor +6
CFreshness: C–Security: not graded yet - 8api-designer
https://github.com/Jeffallan
Use when designing REST or GraphQL APIs, creating OpenAPI specifications, or planning API architecture.
- Repository has 12K stars
- Active in the last 30 days
- Open source (MIT)
★ 12KLast active Oct 16, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 9graphql-architect
https://github.com/Jeffallan
Use when designing GraphQL schemas, implementing Apollo Federation, or building real-time subscriptions.
- Repository has 12K stars
- Active in the last 30 days
- Open source (MIT)
★ 12KLast active Oct 16, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 10pentest-api-deep
jd-opensource
Deep OWASP API Security Top 10 testing for REST, GraphQL, gRPC, and WebSocket APIs — BFLA, mass assignment, rate limiting, and unsafe consumption.
- Open source (Apache-2.0)
★ 315Last active Jul 2, 2026Claude Code, Claude apps, Codex, Cursor +6
CFreshness: C–Security: not graded yet - 11go-graphql
eduardo-sl
Build GraphQL servers in Go with gqlgen: schema-first generation, resolver structure, the N+1 problem and dataloaders, complexity and depth limits, error…
- Active in the last 30 days
- Open source (MIT)
★ 82Last active Oct 14, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 12api-patterns
sharkrebel
API design principles: RESTful, GraphQL, gRPC, versioning, pagination, error format.
- Active in the last 30 days
- Ships helper scripts
- For Python
★ 73Last active Oct 2, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 13api-design-principles
sickn33
Master REST and GraphQL API design principles to build intuitive, scalable, and maintainable APIs that delight developers and stand the test of time.
- Largest repository here (48,428 stars)
- Active in the last 30 days
- Open source (MIT)
★ 48.4KLast active Oct 24, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 14api-security
sickn33
Authorized security assessment of REST, GraphQL, WebSocket, and SOAP APIs: discovery, authentication and authorization flaws (BOLA/IDOR, JWT/OAuth)…
- Largest repository here (48,428 stars)
- Active in the last 30 days
- Open source (MIT)
★ 48.4KLast active Oct 24, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 15api-graphql-grpc
TestMu AI
Designs GraphQL schemas, resolvers, query/mutation/subscription patterns, and protobuf definitions for gRPC services.
- Open source (MIT)
★ 377Last active May 6, 2026Claude Code, Claude apps, Codex, Cursor +6
CFreshness: C–Security: not graded yet