nestjs-security-scan
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data in the form of NestJS project source code (e.g.,
main.ts, controllers, DTOs). This creates a vulnerability surface where malicious instructions or adversarial patterns embedded within the code being audited could attempt to influence the agent's behavior during the review process. - Ingestion points: The skill reads
main.ts,*.controller.ts,*.gateway.ts,*.resolver.ts, and*.dto.tsfiles. - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions to isolate the audited code from the agent's internal logic.
- Capability inventory: The skill utilizes file system access to read and walk through project directories.
- Sanitization: There are no documented steps for sanitizing or filtering the content of the source files before processing them.
Audit Metadata