graphql-and-hidden-parameters — Skills

What it does

field suggestions and error-based discovery

known type probes like type(name: "User")

JS and mobile bundle route extraction

fields present in admin docs but not public docs

additionalProperties or permissive schemas

frontend code using richer request bodies than visible UI controls

mobile endpoints carrying role, org, feature-flag, or internal filter fields

graphql and hidden parameters

Source

Repository: https://github.com/yaklang/hack-skills

graphql-and-hidden-parameters FAQ

What does the graphql-and-hidden-parameters skill do?

>- GraphQL and hidden parameter testing playbook. Use when exploring introspection, batching, undocumented fields, hidden parameters, schema abuse, and GraphQL authorization gaps. field suggestions and error-based discovery known type probes like type(name: "User")

How do I install graphql-and-hidden-parameters?

Run: npx -y skills add https://github.com/yaklang/hack-skills --skill graphql-and-hidden-parameters --agent claude-code — the source lives at github.com/yaklang/hack-skills.

Maintain graphql-and-hidden-parameters?

Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.

[graphql-and-hidden-parameters on getagentictools](https://getagentictools.com/skills/yaklang-hack-skills-graphql-and-hidden-parameters?ref=badge)

npx agentictools info skills/yaklang-hack-skills-graphql-and-hidden-parameters

The second line is the CLI lookup for this page — handy in READMEs and docs.