“GraphQL”

Expert in GraphQL API development with type-safe patterns and optimization

GraphQL — schema, resolvers, N+1/DataLoader, pagination.

Build GraphQL servers in Go with gqlgen: schema-first generation, resolver structure, the N+1 problem and dataloaders, complexity and depth limits, error…

Use when designing GraphQL schemas, implementing Apollo Federation, or building real-time subscriptions.

Use when building or reviewing a graphql-ruby schema, resolver, or mutation.

Operate Linear through its GraphQL API using Agent Vault access, verified reads and mutations, and polished, bloat-free UI presentation patterns.

Debugs REST and GraphQL APIs: unexpected status codes or bodies, auth failures (401/403, OAuth, API keys), schema mismatches, rate limits, pagination, and…

GraphQL and hidden parameter testing playbook.

Agent Skill for inspecting GraphQL schemas.

Specialist subagent: Expert GraphQL architect for API design, schema development, and performance optimization

Master modern GraphQL with federation, performance optimization, and enterprise security.

API design patterns for REST, gRPC, and GraphQL.

Team baseline for external-interface contract artifacts: OpenAPI, JSON Schema, AsyncAPI, .proto, and GraphQL SDL, with spectral, ajv, buf, and…

IDOR / BOLA hunting - two-account methodology, identifier discovery and UUID leak chaining, the trusted-identifier test, GraphQL node and nested-object IDOR…

Idiomatic Rust guide based on Apollo GraphQL's best practices handbook.

API attack hunting (REST / GraphQL / gRPC) - BOLA/IDOR, BFLA, mass assignment, excessive data exposure, auth/JWT, introspection + batching, rate-limit abuse.

GraphQL IDOR/auth-bypass, XXE file-read/SSRF (SVG/DOCX/SAML), SSTI detection and RCE.

Execute raw GraphQL queries and mutations against the Linear API.

Interact with Linear project management - query issues, update status, create tickets, and manage workflows using the Linear GraphQL API.

Manage Linear issues, projects, and cycles via the Linear GraphQL API

Conducts security testing of REST, GraphQL, and gRPC APIs to identify vulnerabilities in authentication, authorization, rate limiting, input validation, and…

Create or extend a Bruno API collection across protocols: HTTP/REST (JSON, multipart, XML, SSE), GraphQL, gRPC (proto imports, streaming), WebSocket, and…

API security testing - GraphQL, REST API, WebSocket, and Web-LLM attack techniques.

构建、修改或审查 REST API、GraphQL 端点、webhook、中间件、请求/响应处理、API 版本管理、限流或分页时使用。