nestjs-debug
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill identifies and runs shell commands necessary for the development lifecycle, including starting the application via
npm run dev:api, building libraries withnpx nx build, and managing local database services usingdocker compose. - [DYNAMIC_EXECUTION]: The skill programmatically generates corrected TypeScript code and applies it to the project files using file-write operations. This behavior is the primary intended function of the autonomous debugging loop.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input in the form of application logs, stack traces, and exit codes to drive its analysis phase.
- Ingestion points: Application
stdoutandstderrcaptured during theEXECUTEstep inSKILL.md. - Boundary markers: None explicitly defined for log processing.
- Capability inventory:
execute_shell,write_file, andread_fileare available to the agent following the analysis. - Sanitization: No specific sanitization of log content is mentioned before it is used to formulate code fixes.
Audit Metadata