Awarexone

Axguard GraphQL — Development skill for Claude Code

Development community

GraphQL misconfig — introspection enabled, CSRF prevention off.

How to install Axguard GraphQL

Installs to ~/.claude/skills/awarexone-axguard-axguard-graphql/SKILL.md

Terminal

mkdir -p ~/.claude/skills/awarexone-axguard-axguard-graphql && curl -fsSL https://raw.githubusercontent.com/Awarexone/AXguard/HEAD/commands/axguard-graphql.md -o ~/.claude/skills/awarexone-axguard-axguard-graphql/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Axguard GraphQL does

description: GraphQL misconfig — introspection enabled, CSRF prevention off. Usage: /axguard-graphql [path]

/axguard-graphql

**Specialist:** GraphQL Reviewer

Usage

/axguard-graphql
/axguard-graphql ./api

Focus

Introspection left on in production configs
Apollo / framework CSRF prevention disabled
Overly broad resolvers without auth (manual follow-up)

Steps

Scan → keep graphql.*.
Confirm environment (prod vs local-only).
Disable introspection in

Alternatives in Development

Bypass 403 — Probe a 403/401 endpoint with the most-paid bypass tricks (header injection, path encoding, method swap, WAF f 4.5k ★
MCP Language Server — mcp-language-server gives MCP enabled clients access semantic tools like get definition, references, rename, a 1.5k ★
Module Status — Show status of all modules or a specific module (enabled/disabled, version, routes, migrations) 407 ★