Rover

What it does

The workflow covers authentication, local composition, schema checks and compact schema discovery. It distinguishes commands that read a graph reference from utilities that consume piped schema text. That distinction is useful when an agent needs a small view of a large graph without filling its context with complete SDL.

Best for

GraphQL maintainers inspecting schemas or preparing a controlled subgraph publication and composition workflow.

Tradeoffs and requirements

Publishing and checking are different operations, and authenticated access does not authorize changing every graph variant. CLI flags and schema-discovery commands depend on the installed Rover version. Authentication tokens should remain outside command logs and committed configuration.

Node.js v18+, Linux/macOS/Windows

Install from the source

Inspect the pinned source snapshot and its supporting files first. The command selects this skill through the open-source skills CLI. Node.js and agent-specific setup may be required. Installation can download code. Catalog ingestion never executes skill instructions or install scripts.

npx skills add https://github.com/apollographql/skills/tree/9dda1397730370aeb8df4ff8f2015c34c86b5003/skills/rover --skill rover

Review pinned skill folder ↗ · CLI documentation ↗

After source review, use npx skills check and npx skills update to inspect and apply upstream updates. Re-check changed instructions before running them.

Safety & review signals

Static review only. This is not a security audit or a guarantee of safety.

SKILL.md text only; scripts, dependencies and runtime behavior not audited.

• Remote Shell — review the source context.
• Credential Reference — review the source context.
• Network Access — review the source context.
• Shell Or Package Install — review the source context.

Allowed tools declaration: Bash(rover:*) Bash(npm:*) Bash(npx:*) Read Write Edit Glob Grep. Runtime permissions and network behavior: Unknown.

AI Craft Pad Skill Score

73/100 · Metadata coverage 100% · Model 1.0

Scores summarize observable discovery signals. Popularity and repository activity apply to the whole repository. Unknown runtime safety earns no certification.

Documentation

100/100

100

Maintenance

100/100

100

License Clarity

100/100

100

Repository Health

100/100

100

Compatibility Evidence

80/100

80

Popularity

38/100

38

Originality

80/100

80

Static Safety

0/100

0

Suggested workflow

Identify the intended graph and variant, verify the CLI version and start with read-only schema discovery. Compose or check a local change before publishing, using the repository’s existing federation settings and retaining the exact schema artifact supplied to validation.

How to judge the result

Inspect composition and schema-check results, confirm which graph variant received any authorized publication and exercise a representative operation afterward. Test missing authentication and invalid references in development, and distinguish successful retrieval from successful deployment of the corresponding runtime.