nestjs-expert

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use standard diagnostic shell commands (such as grep, sed, find, and test) and framework-specific CLI tools (nest, npm) to analyze the project environment. These are routine development operations for identifying framework versions and project structure.
  • [INDIRECT_PROMPT_INJECTION]: The skill identifies and processes external data including package.json, nest-cli.json, and TypeScript source files. While this creates a surface for indirect prompt injection if the project data contains malicious instructions, the skill uses these inputs for architectural discovery and configuration analysis rather than as direct command input.
  • [EXTERNAL_DOWNLOADS]: All external resources mentioned, including documentation links and software dependencies, point to trusted organizations and well-known services such as Nest.js, TypeORM, Mongoose, and the official NPM registry. These are documented neutrally as standard project requirements.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 03:22 PM