The Agent Skills Directory

[SAFE]: The skill provides standard boilerplate and patterns for NestJS development, including controllers, services, repositories, and authentication guards. No malicious patterns or bypasses were detected.
[SAFE]: The skill follows security best practices by explicitly warning against hardcoding sensitive information like DATABASE_URL or JWT_SECRET, instead advising the use of environment variables and .env files.
[SAFE]: Input validation is consistently emphasized through the use of class-validator DTOs and NestJS ValidationPipe, which mitigates injection risks by ensuring only expected data is processed.
[EXTERNAL_DOWNLOADS]: The skill documents the installation of numerous legitimate Node.js packages for database connectivity (e.g., pg, mysql2, @libsql/client, @neondatabase/serverless). These are all standard drivers for their respective platforms.
[COMMAND_EXECUTION]: The skill uses standard CLI tools for development, such as npm, npx, docker, and platform-specific CLIs like gel, netlify, and turso. These are documented for project initialization and database migration purposes (drizzle-kit generate/migrate).
[INDIRECT_PROMPT_INJECTION]: While the skill generates code that processes external data (API endpoints), it provides mandatory sanitization patterns using ValidationPipe and structured DTOs to mitigate this risk. All examples include proper validation layers.

nestjs