nestjs-expert
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it reads and analyzes local project files (e.g.,
package.json,nest-cli.json, module files) which could potentially contain attacker-controlled content. - Ingestion points: File reads of
package.json,nest-cli.json,tsconfig.json, and recursive search for*.module.tsfiles. - Boundary markers: None identified; the skill does not use specific delimiters to isolate external project content from its own instructional context.
- Capability inventory: The skill has the ability to execute shell commands (
npm,nest,grep,find) and perform diagnostic checks on the codebase. - Sanitization: No explicit sanitization or validation logic is present to handle potentially malicious instructions embedded within the analyzed project metadata or source code.
Audit Metadata