Axguard GraphQL — Development skill for Claude Code
GraphQL misconfig — introspection enabled, CSRF prevention off.
How to install Axguard GraphQL
Installs to ~/.claude/skills/awarexone-axguard-axguard-graphql/SKILL.md
mkdir -p ~/.claude/skills/awarexone-axguard-axguard-graphql && curl -fsSL https://raw.githubusercontent.com/Awarexone/AXguard/HEAD/commands/axguard-graphql.md -o ~/.claude/skills/awarexone-axguard-axguard-graphql/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Axguard GraphQL does
description: GraphQL misconfig — introspection enabled, CSRF prevention off. Usage: /axguard-graphql [path]
/axguard-graphql
**Specialist:** GraphQL Reviewer
Usage
/axguard-graphql
/axguard-graphql ./api
Focus
- Introspection left on in production configs
- Apollo / framework CSRF prevention disabled
- Overly broad resolvers without auth (manual follow-up)
Steps
- Scan → keep
graphql.*. - Confirm environment (prod vs local-only).
- Disable introspection in
Alternatives in Development
- MCP Language Server — mcp-language-server gives MCP enabled clients access semantic tools like get definition, references, rename, a 1.5k ★
- Module Status — Show status of all modules or a specific module (enabled/disabled, version, routes, migrations) 407 ★
- Linear Claude Skill — Manage Linear issues, projects, and teams with MCP tools, SDK scripts, and GraphQL fallbacks for reliable proj 68 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Axguard Cloud
Cloud and CORS misconfig — metadata URLs, wildcard origins. Usage: /axguard-cloud [path]
Axguard Auth
AuthZ / IDOR / JWT / CSRF footgun hunt. Usage: /axguard-auth [path]
Axguard Ssrf
SSRF and unsafe egress — user-influenced fetch/requests, metadata IPs. Usage: /axguard-ssrf [path]
New Hook
Scaffold a new GraphQL hook (useQuery or useMutation) with gql/ directory, following project conventions. Usag
Revisar Ingles
Review your real, unprompted English usage from normal Claude Code sessions (requires passive_mode enabled) an
Pi Inspect
Introspection dashboard for the pi coding agent — tools, prompts, skills, and the system prompt injected on in
Related Agents
GraphQL Audit
GraphQL API security specialist. Use for introspection analysis, query complexity attacks, injection testing,
API Attacker
API security testing specialist for REST, GraphQL, gRPC, and WebSocket APIs. Handles BOLA/IDOR, mass assignmen
Review Code Correctness
A code review agent that checks analysis scripts for logical errors, incorrect function usage, wrong variable