add-nest-profiler-collector
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious behavior detected. The skill is an instruction set for the Eleven Labs NestJS profiler extension. All instructions and references align with the stated goal of configuring profiler modules.
- [EXTERNAL_DOWNLOADS]: The skill installs @eleven-labs/ scoped packages (e.g., @eleven-labs/nest-profiler-http, @eleven-labs/nest-profiler-typeorm) from public registries. These are official vendor resources and are safe for their intended use.
- [COMMAND_EXECUTION]: The agent is instructed to use the project's package manager to add dependencies. These commands are standard and target identified vendor libraries.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing external data and codebase metadata.
- Ingestion points: Project configuration files (package.json), application source code (main.ts, profiling modules), and user queries.
- Boundary markers: Relies on agent platform guardrails; not explicitly defined in skill text.
- Capability inventory: Package installation and file modification.
- Sanitization: The skill mandates the use of secret masking (e.g., maskKeys, maskUserFields) for sensitive data like passwords and tokens, and requires the agent to confirm installation steps with the user via AskUserQuestion.
Audit Metadata