setup-nest-profiler
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Uses package managers (
npm,pnpm, oryarn) to install required profiler packages and peer dependencies. - [EXTERNAL_DOWNLOADS]: References and downloads vendor-owned resources from official repositories and registries, as well as documentation from
eleven-labs.com. - [INDIRECT_PROMPT_INJECTION]: Implements a workflow that reads local project files (
package.json, lockfiles, and application source code) to detect the application stack and configure appropriate collectors. - Ingestion points: Reads
package.json, lockfiles, and application source code viagrep(SKILL.md). - Boundary markers: The agent is instructed to follow specific code templates in reference files (e.g.,
enable-strategies.md). - Capability inventory: Performs file writes, file modifications, and package installations (
SKILL.md). - Sanitization: Relies on user confirmation for chosen collectors and uses structured NestJS code patterns.
Audit Metadata