×
Third-party audit

Gen Agent Trust Hub

apollo-mcp-server · apollographql/skills

High risk
Provider summary

This skill facilitates the installation and use of the Apollo MCP Server to connect AI agents with GraphQL APIs. It involves downloading installation scripts from the vendor's official domain and allows for the execution of GraphQL operations. While it utilizes a high-privilege installation pattern (piping remote scripts to a shell), the source is the vendor's official infrastructure. The capability to execute arbitrary GraphQL operations creates a surface for indirect prompt injection if malicious operations are provided via local files or remote collections.

The provider classified the analyzed snapshot as HIGH risk. This result applies to the content available at audit time.

Provider
Gen Agent Trust Hub
Normalized result
fail
Risk level
HIGH
Audited
Mar 21, 2026
Interpretation

How to use this signal

01

Confirm the source

Compare the repository, publisher, and installation command before continuing.

02

Read the content

Review SKILL.md, scripts, and allowed tools. OpenAI Suite never executes them during indexing.

03

Limit permissions

Use the narrowest possible scope and avoid broad credentials for third-party skills.