nestjs-expert
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes local project files such as
package.json,nest-cli.json, and source code files using diagnostic tools likegrepandfind. While this creates a surface where instructions embedded in project files could influence the agent, it is an expected part of a developer tool's functionality. - Ingestion points:
package.json,nest-cli.json,tsconfig.json, and*.module.tsfiles. - Boundary markers: Not explicitly defined in the provided instructions.
- Capability inventory: Shell command execution, project build scripts (
npm run build), and testing utilities (npm run test). - Sanitization: The skill relies on standard command-line tools for extraction without specific sanitization layers.
- [COMMAND_EXECUTION]: The skill employs standard shell utilities (
test,grep,sed,find) and project-level commands (npm run build,npm run test,nest info) to diagnose and validate the application state. These are standard operations for an engineering-focused agent.
Audit Metadata