Skills/Claude Code plugins/apollo-skills

apollo-skills@1.2.9

CAUTION

Publisher claims: "Apollo GraphQL agent skills for Claude Code — Apollo Client, Server, Federation, Connectors, Router, Rover CLI, iOS, Kotlin, and the Apollo MCP server. Covers schema design, query optimization, and GraphQL best practices." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Claude Code plugin marketplacePublisher apollographql · joined 0 days agoInstalls 0Last detonated 55 min ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
Pipe-to-shell patternskills/apollo-mcp-server/SKILL.md:27 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06
CRITICAL
Pipe-to-shell patternskills/skill-creator/SKILL.md:350 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:96 · npx invocation of non-well-known package — may execute untrusted code
AST06
CRITICAL
Context shift attemptskills/skill-creator/references/apollo-skills.md:229 · Context shift attempt — trying to change operational mode
AST01
CRITICAL
Pipe-to-shell patternskills/rover/references/configuration.md:14 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06
CRITICAL
Pipe-to-shell patternskills/rover/SKILL.md:29 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:15 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:110 · npx invocation of non-well-known package — may execute untrusted code
AST06
CRITICAL
Pipe-to-shell patternskills/rover/references/configuration.md:11 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06
CRITICAL
Pipe-to-shell patternskills/rover/references/configuration.md:298 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06
MEDIUM
File type combined with upload actionskills/apollo-ios/references/codegen.md:11 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionskills/apollo-server/references/data-sources.md:270 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packageskills/apollo-mcp-server/SKILL.md:86 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Authorization escalation languageskills/apollo-server/references/error-handling.md:155 · Authorization escalation language
AST01
MEDIUM
Remote installer piped to shellskills/rover/references/configuration.md:298 · Remote installer piped to shell
AST07
MEDIUM
URL using raw IP addressskills/apollo-mcp-server/SKILL.md:86 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
Remote installer piped to shellskills/rover/references/configuration.md:11 · Remote installer piped to shell
AST07
HIGH
npx invocation of non-well-known packageskills/rover/references/configuration.md:28 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
Remote installer piped to shellskills/apollo-mcp-server/SKILL.md:27 · Remote installer piped to shell
AST07
MEDIUM
Remote installer piped to shellskills/rover/SKILL.md:29 · Remote installer piped to shell
AST07
MEDIUM
URL using raw IP addressskills/apollo-mcp-server/SKILL.md:78 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addressskills/apollo-mcp-server/SKILL.md:64 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
npx invocation of non-well-known packageskills/graphql-operations/references/tooling.md:72 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:193 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
File type combined with upload actionskills/apollo-ios/SKILL.md:24 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
File permission modification commandskills/rover/references/configuration.md:343 · File permission modification command — agent changes file ownership/permissions
AST05
HIGH
npx invocation of non-well-known packageskills/graphql-operations/references/tooling.md:327 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/graphql-operations/references/tooling.md:69 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/graphql-operations/references/tooling.md:351 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
File type combined with upload actionskills/apollo-client/references/mutations.md:200 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
Outbound HTTP to raw IP addressskills/apollo-mcp-server/SKILL.md:86 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
MEDIUM
Remote installer piped to shellskills/rover/references/configuration.md:14 · Remote installer piped to shell
AST07
HIGH
Authorization escalation languageskills/graphql-schema/references/naming.md:207 · Authorization escalation language
AST01
HIGH
Outbound HTTP to raw IP addressskills/apollo-mcp-server/SKILL.md:78 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Auto-update or dynamic fetch configurationskills/apollo-router/references/configuration.md:309 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06
MEDIUM
File type combined with upload actionskills/apollo-client/references/mutations.md:236 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionskills/apollo-server/references/plugins.md:60 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packageskills/graphql-operations/references/tooling.md:348 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:152 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
Remote installer piped to shellskills/skill-creator/SKILL.md:350 · Remote installer piped to shell
AST07
HIGH
Outbound HTTP to raw IP addressskills/apollo-mcp-server/SKILL.md:64 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07