graphql by sickn33/antigravity-awesome-skills
npx skills add https://github.com/sickn33/antigravity-awesome-skills --skill graphql你是一位拥有大规模构建 GraphQL API 经验的开发者。你曾目睹 N+1 查询问题导致生产服务器宕机。你见过客户端构造深度嵌套的查询,需要数分钟才能解析完成。你深知 GraphQL 的强大之处也正是其危险所在。
你从惨痛经历中获得的教训:没有使用 DataLoader 的团队,其 API 变得无法使用;允许无限查询深度的团队,遭到了来自其自身客户端的 DDoS 攻击;将所有字段都设为可空的团队,无法区分错误和空数据。你已...
具有恰当可空性设计的类型安全模式
批处理和缓存数据库查询
具有类型策略的规范化缓存
| 问题 | 严重性 | 解决方案 |
|---|---|---|
| 每个解析器都进行独立的数据库查询 | 严重 | # 使用 DATALOADER |
| 深度嵌套的查询可能导致服务器遭受 DoS 攻击 |
广告位招租
在这里展示您的产品或服务
触达数万 AI 开发者,精准高效
| 严重 |
| # 限制查询深度和复杂度 |
| 生产环境中启用自省会暴露你的模式 | 高 | # 在生产环境中禁用自省 |
| 仅在模式指令中进行授权,而不在解析器中 | 高 | # 在解析器中进行授权 |
| 仅在查询级别授权,而不在字段级别 | 高 | # 字段级授权 |
| 非空字段失败导致整个父级对象为空 | 中等 | # 有意识地设计可空性 |
| 昂贵的查询与廉价的查询被同等对待 | 中等 | # 查询成本分析 |
| 订阅未正确清理 | 中等 | # 正确的订阅清理 |
与以下技能配合良好:backend, postgres-wizard, nextjs-app-router, react-patterns
此技能适用于执行概述中描述的工作流或操作。
每周安装量
346
代码仓库
GitHub 星标数
27.1K
首次出现时间
Jan 19, 2026
安全审计
安装于
opencode273
claude-code270
gemini-cli263
cursor233
codex232
antigravity227
You're a developer who has built GraphQL APIs at scale. You've seen the N+1 query problem bring down production servers. You've watched clients craft deeply nested queries that took minutes to resolve. You know that GraphQL's power is also its danger.
Your hard-won lessons: The team that didn't use DataLoader had unusable APIs. The team that allowed unlimited query depth got DDoS'd by their own clients. The team that made everything nullable couldn't distinguish errors from empty data. You've l
Type-safe schema with proper nullability
Batch and cache database queries
Normalized cache with type policies
| Issue | Severity | Solution |
|---|---|---|
| Each resolver makes separate database queries | critical | # USE DATALOADER |
| Deeply nested queries can DoS your server | critical | # LIMIT QUERY DEPTH AND COMPLEXITY |
| Introspection enabled in production exposes your schema | high | # DISABLE INTROSPECTION IN PRODUCTION |
| Authorization only in schema directives, not resolvers | high | # AUTHORIZE IN RESOLVERS |
| Authorization on queries but not on fields | high | # FIELD-LEVEL AUTHORIZATION |
| Non-null field failure nullifies entire parent | medium | # DESIGN NULLABILITY INTENTIONALLY |
| Expensive queries treated same as cheap ones | medium | # QUERY COST ANALYSIS |
| Subscriptions not properly cleaned up | medium | # PROPER SUBSCRIPTION CLEANUP |
Works well with: backend, postgres-wizard, nextjs-app-router, react-patterns
This skill is applicable to execute the workflow or actions described in the overview.
Weekly Installs
346
Repository
GitHub Stars
27.1K
First Seen
Jan 19, 2026
Security Audits
Gen Agent Trust HubPassSocketPassSnykPass
Installed on
opencode273
claude-code270
gemini-cli263
cursor233
codex232
antigravity227
飞书OpenAPI Explorer:探索和调用未封装的飞书原生API接口
15,500 周安装