nestjs-code-audit
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a bundled Node.js script to orchestrate the audit process. This script performs controlled execution of local project tools (eslint, tsc) and git commands. Safety is maintained by using explicit non-mutating flags and confining execution to binaries within the project's node_modules directory.
- [DATA_EXFILTRATION]: The skill accesses project files and manifests to identify code quality issues. This data ingestion is restricted to the repository root via path validation checks, and the skill contains no network-enabled components that could exfiltrate the collected information.
- [PROMPT_INJECTION]: The skill is resilient to indirect prompt injection from the audited code. Ingestion points: scripts/collect-quality-evidence.mjs reads source and config files. Boundary markers: The instructions define specific audit lanes and verification contracts. Capability inventory: spawnSync executes eslint, tsc, and git. Sanitization: Path validation (insideRoot) prevents directory traversal. The read-only constraint effectively mitigates risks from processing untrusted code.
Audit Metadata