nestjs-deployment

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill promotes security-positive recommendations such as using USER node in Dockerfiles to avoid running as root and reduce the attack surface of the container.
  • [SAFE]: It encourages proper secret management by instructing that environment variables be mapped through Kubernetes Secrets or secure deployment pipelines rather than being hardcoded in application logic.
  • [SAFE]: The provided Dockerfile examples use official base images (node:20-alpine) and standard package installation commands (npm ci) without any suspicious remote code execution or obfuscation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 10:40 AM