nestjs-expert
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use standard diagnostic shell commands (such as
grep,sed,find, andtest) and framework-specific CLI tools (nest,npm) to analyze the project environment. These are routine development operations for identifying framework versions and project structure. - [INDIRECT_PROMPT_INJECTION]: The skill identifies and processes external data including
package.json,nest-cli.json, and TypeScript source files. While this creates a surface for indirect prompt injection if the project data contains malicious instructions, the skill uses these inputs for architectural discovery and configuration analysis rather than as direct command input. - [EXTERNAL_DOWNLOADS]: All external resources mentioned, including documentation links and software dependencies, point to trusted organizations and well-known services such as Nest.js, TypeORM, Mongoose, and the official NPM registry. These are documented neutrally as standard project requirements.
Audit Metadata