“GraphQL”

Designs REST, GraphQL, and gRPC APIs (OpenAPI/schema/proto output) and reviews existing APIs for consistency, best practices, and breaking change risks.

Use this skill when the user asks to design a REST API, create API endpoints, write an OpenAPI/Swagger specification, design a GraphQL schema, plan API…

Agent Skill for Linear via GraphQL API.

REST and GraphQL API design patterns, OpenAPI specs, versioning, pagination, rate limiting, authentication, and error handling.

Review an API contract (REST or GraphQL) before or while it is implemented, checking resource naming, HTTP semantics, status codes, error shape, pagination…

Design or review an API (REST, GraphQL, gRPC, SDK or library interface) for clarity, consistency and long-term compatibility.

Use when designing a new API or endpoint, choosing between REST, GraphQL or gRPC, or reviewing an API contract for design and safety.

Use for any Node.js backend work: package.json, Express, Fastify, middleware, REST or GraphQL APIs, authentication, database integration, error handling…

Design RESTful and GraphQL APIs with consistency, versioning, and documentation

Apply Apollo Client conventions for GraphQL cache identity, queries, mutations, fragments and normalization when Apollo is present.

Property-based testing of HTTP APIs against an OpenAPI or GraphQL specification using Schemathesis.

Use when removing, renaming or changing a public API, event contract, GraphQL or gRPC surface, or a client or SDK that another repository or a customer uses.

Review Petoria product API consistency across GraphQL operations, DTOs, schemas, enums, filters, and remaining legacy terminology.

This skill should be used when the user asks to "test API security", "fuzz APIs", "find IDOR vulnerabilities", "test REST API", "test GraphQL", "API…

Security-test a REST, GraphQL, or gRPC API — enumerate endpoints from an OpenAPI/GraphQL/Postman schema (or by crawling), then actually exploit the…

Use for REST or GraphQL object, property, function, tenant, relationship, lifecycle, batch, export, job, and API-version authorization boundaries; do not…

Use when enumerating API surface (OpenAPI/Swagger, GraphQL introspection, versioned or undocumented endpoints) and probing API object graphs for BOLA/IDOR.

.NET Web 入口与参数映射分析工具。从 ASP.NET Core、MVC、Web API、Minimal API、SignalR、GraphQL、WCF 源码中提取完整入口、参数结构与请求模板。

.NET 入口到 Sink 的多层数据流追踪工具。根据 route_id 追踪从 Controller、Minimal API、Hub、GraphQL Resolver、WCF Service 到最终敏感操作点的证据链，不输出漏洞结论。

GitHub CLI (gh) and API operations for branches, PRs, issues, releases, workflows, and GraphQL queries.

Reviews API-specific vulnerabilities - BOLA/IDOR, broken function-level authorization, mass assignment, rate limiting, excessive data exposure, GraphQL…

Discovers X (Twitter) user original posts only (no replies, retweets, or quote tweets) via logged-in GraphQL (Cookie auth_token+ct0), with FxEmbed /…

Guide for writing idiomatic Rust code based on Apollo GraphQL's best practices handbook.

Correct way to call the Railway GraphQL API for the Open Manus fleet (verify deploys, read service variables, list services).