Skills graphql-schema
📦

graphql-schema

Content revision r1 Safe ⚙️ External commands

Create GraphQL Operations with Generated Types

GraphQL client work often creates duplicate operations, weak error handling, and stale generated types. This skill guides consistent .gql files, Apollo generated hooks, codegen steps, and mutation UI safeguards.

Supports: Claude Codex Code(CC)
🥉 78 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "graphql-schema" from https://skillstore.io/skills/chriswiles-graphql-schema.md and its manifest at https://skillstore.io/api/skills/chriswiles-graphql-schema/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/chriswiles-graphql-schema.md Signed manifest GET /api/skills/chriswiles-graphql-schema/manifest Signed lockfile GET /api/skills/chriswiles-graphql-schema/lockfile

Test it

Using "graphql-schema". Request to add a new items list query.

Expected outcome:

A plan that creates a dedicated query file, runs type generation, imports the generated hook, and handles loading, error, and empty states.

Using "graphql-schema". Request to wire a create item form to GraphQL.

Expected outcome:

A mutation workflow with a separate operation file, generated hook use, disabled submission during loading, success feedback, and visible failure handling.

Using "graphql-schema". Request to review an Apollo Client pull request.

Expected outcome:

A review checklist covering inline operation use, generated types, mutation safeguards, cache updates, fetch policy choices, and optimistic update risks.

Security Audit

Safe
v10 • 7/9/2026 Open versioned report

Static alerts are false positives caused by Markdown backticks, GraphQL field names, and JSX property names. The only shell examples are hardcoded npm codegen commands with no dynamic input, secret handling, obfuscation, prompt injection, or exfiltration intent.

1
Files scanned
293
Lines analyzed
0
Review items
0
False positives ignored

Risk Factors

⚙️ External commands (35)
SKILL.md:10 SKILL.md:11 SKILL.md:12 SKILL.md:17-27 SKILL.md:27-33 SKILL.md:33-43 SKILL.md:43-47 SKILL.md:47-49 SKILL.md:49-53 SKILL.md:53-67 SKILL.md:67-73 SKILL.md:73-82 SKILL.md:82-86 SKILL.md:86-88 SKILL.md:88-92 SKILL.md:92-129 SKILL.md:129-140 SKILL.md:140-159 SKILL.md:159-167 SKILL.md:167-168 SKILL.md:168-169 SKILL.md:169-170 SKILL.md:170-174 SKILL.md:174-190 SKILL.md:190-196 SKILL.md:196-211 SKILL.md:211-224 SKILL.md:224-233 SKILL.md:233-237 SKILL.md:237-243 SKILL.md:243-247 SKILL.md:247-249 SKILL.md:251-276 SKILL.md:276-280 SKILL.md:280-286
No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/chriswiles-graphql-schema/audits/10?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/chriswiles-graphql-schema/security.svg)](https://skillstore.io/skills/chriswiles-graphql-schema?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/chriswiles-graphql-schema?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/chriswiles-graphql-schema/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/chriswiles-graphql-schema.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

ChrisWiles. (2026). graphql-schema security audit report (audit version 10) [Author version unspecified]. Skillstore. https://skillstore.io/skills/chriswiles-graphql-schema/audits/10

BibTeX citation

@techreport{chriswiles-chriswiles-graphql-schema-2026, author = {ChrisWiles}, title = {graphql-schema security audit report (audit version 10)}, institution = {Skillstore}, year = {2026}, number = {10}, url = {https://skillstore.io/skills/chriswiles-graphql-schema/audits/10}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "graphql-schema security audit report (audit version 10)" version: "unspecified" type: report authors: - name: "ChrisWiles" date-released: "2026-07-09" url: "https://skillstore.io/skills/chriswiles-graphql-schema/audits/10" identifiers: - type: other value: "skillstore:chriswiles-graphql-schema:audit:10" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High
55
Architecture
85
Maintainability
87
Content
70
Community
83
Spec Compliance

What You Can Build

Add Typed List Queries

Create .gql query files and consume generated hooks in React list screens.

Standardize Mutation Forms

Implement mutations with disabled submit buttons, loading states, toast feedback, and required error handling.

Review GraphQL Client Patterns

Check pull requests for inline operations, missing codegen, weak cache updates, and unsafe optimistic updates.

Try These Prompts

Create a Query 
Create a GraphQL query pattern for a React list screen. Include the .gql file, codegen step, and generated hook usage.
Add a Mutation 
Design a GraphQL mutation flow for this form. Include the .gql operation, generated hook usage, loading state, success feedback, and onError handling.
Choose Query Options 
Review this GraphQL query usage and recommend fetch policy, skip logic, polling, and retry behavior for the user experience.
Audit Client GraphQL Patterns 
Audit this feature for GraphQL client patterns. Find inline operations, missing generated hooks, weak mutation handling, cache risks, and unsafe optimistic updates.

Best Practices

  • Keep GraphQL operations in .gql files and regenerate types after every operation change.
  • Use generated hooks instead of raw Apollo hooks for stronger type safety.
  • Treat every mutation as a user workflow with loading, success, failure, and duplicate-submit handling.

Avoid

  • Do not inline gql literals inside React components.
  • Do not submit mutations without onError handling and user-visible failure feedback.
  • Do not use optimistic updates for destructive actions or operations that often fail validation.

Frequently Asked Questions

Does this skill generate GraphQL server schemas?
No. It focuses on client-side operations, generated hooks, and Apollo Client usage patterns.
Does it require Apollo Client?
Yes. The examples and hooks assume Apollo Client and a GraphQL codegen setup.
Can it run code generation automatically?
It can remind an agent to run project codegen scripts. Users should review local npm scripts first.
Does it replace GraphQL schema validation?
No. It gives client patterns and depends on existing schema and codegen tooling for validation.
What error handling does it expect?
Mutations should include onError behavior, user feedback, loading state, and protection against duplicate submissions.
When should optimistic updates be avoided?
Avoid them for destructive operations, validation-heavy actions, server-generated values, and changes that affect other users.

Developer Details

Author

ChrisWiles

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/ChrisWiles/claude-code-showcase/tree/main/.claude/skills/graphql-schema

Ref

26421118b848d9f1efc0aa169d8a7a9e7e0a877e

Maintenance freshness

7/20/2026

Usage

6 downloads · 231 views

File structure

📄 SKILL.md