nestjs-expert
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive architectural guidance and troubleshooting for Nest.js applications, which is entirely consistent with its stated purpose as a developer tool.\n- [COMMAND_EXECUTION]: The diagnostic shell commands (e.g.,
grep,find,npm run build) are one-shot operations used to inspect project configuration and validate fixes locally. These are standard development tasks and do not present a security risk in this context.\n- [EXTERNAL_DOWNLOADS]: All external URLs point to official framework documentation (docs.nestjs.com, typeorm.io) or reputable open-source project repositories (Jest, Supertest).\n- [INDIRECT_PROMPT_INJECTION]: The skill analyzes local project files to provide context-aware advice.\n - Ingestion points:
package.json,nest-cli.json,tsconfig.json, and*.module.tsfiles identified in the detection phase.\n - Boundary markers: None present.\n
- Capability inventory: Build and test execution commands (
npm run build,npm run test) and Nest CLI diagnostics (nest info).\n - Sanitization: Commands are one-shot and focused on project metadata analysis, minimizing the risk of automated exploitation.
Audit Metadata