nestjs-deployment
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill promotes security-positive recommendations such as using
USER nodein Dockerfiles to avoid running as root and reduce the attack surface of the container. - [SAFE]: It encourages proper secret management by instructing that environment variables be mapped through Kubernetes Secrets or secure deployment pipelines rather than being hardcoded in application logic.
- [SAFE]: The provided Dockerfile examples use official base images (
node:20-alpine) and standard package installation commands (npm ci) without any suspicious remote code execution or obfuscation.
Audit Metadata