nestjs-features-performance
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides expert-level instructions for NestJS development, security, and performance optimization. All technical guidance follows industry best practices. It includes a reference to the official NestJS GitHub repository (a well-known service) and an external reference for documentation purposes, which do not involve remote code execution or unauthorized downloads.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze user-provided code, environment configurations, and deployment manifests, which presents an inherent attack surface for indirect prompt injection.
- Ingestion points: User-supplied project files, Node.js configurations, and infrastructure manifests (SKILL.md, 'Establish the runtime baseline').
- Boundary markers: The instructions mandate reconciling active instructions and preserving existing user changes, though they do not define specific delimiters for separating user code from agent instructions.
- Capability inventory: The agent is authorized to modify files and execute state-changing commands, including benchmarks and deployment tasks (SKILL.md, 'Pre-execution conflict guard').
- Sanitization: The skill provides detailed guidance for sanitizing data within the application (references/security.md), but does not specify sanitization for the agent's ingestion process.
Audit Metadata