nestjs-expert
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate architectural guidance and promotes secure coding practices such as input validation, dependency injection, and proper credential management. No indicators of exfiltration, obfuscation, or unauthorized access were found.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user requirements and legacy codebases (e.g., in
references/migration-from-express.md). This ingestion surface could potentially be exploited if a user provides code containing malicious instructions. However, the skill does not possess sensitive capabilities or high privileges that would escalate this risk beyond standard LLM interaction risks. - Ingestion points: Requirement analysis phase and Express.js migration code processing.
- Boundary markers: None explicitly defined to distinguish instructions from data.
- Capability inventory: Limited to code generation and standard development tool execution (e.g.,
npm run test). - Sanitization: None specified for external content processing.
Audit Metadata