nestjs-apis
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent on how to build and review API endpoints that ingest untrusted external data through DTOs and request parameters.
- Ingestion points: Controller parameters (
@Param,@Query,@Body) and DTO definitions described inSKILL.md. - Boundary markers: The skill recommends the use of
ValidationPipewithwhitelist: truefor data validation, but does not explicitly define delimiters to prevent the LLM from interpreting instructions embedded in string data. - Capability inventory: The skill focus is on code structure; it does not explicitly request high-privilege tools such as shell access or arbitrary network operations.
- Sanitization: Mandates the use of
class-validatorandValidationPipeto ensure data conforms to expected schemas.
Audit Metadata