The Agent Skills Directory

[SAFE]: No security issues detected during the audit of the documentation or the included scripts.
[EXTERNAL_DOWNLOADS]: The skill includes a Python script (scripts/check-updates.py) that performs network requests to the official npm registry (registry.npmjs.org) to check for framework updates. This targets a well-known service and is documented as a maintenance tool.
[DATA_EXPOSURE_&_EXFILTRATION]: The documentation provides clear guidance on secure secret management, recommending the use of environment variables and .env files while explicitly warning against hardcoding credentials.
[COMMAND_EXECUTION]: Installation instructions utilize standard package managers (npm, npx) and the official NestJS CLI, which is the standard and expected workflow for this framework.
[DYNAMIC_EXECUTION]: No dangerous dynamic execution patterns (such as eval or exec on untrusted input) were found in the provided scripts.

nestjs