nestjs-notification

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill demonstrates standard integration with Firebase Cloud Messaging (FCM) and TypeORM. All code snippets follow best practices for NestJS service development.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines an interface for ingesting user-controlled content (notification title, body, and metadata) in references/service.md. While this represents a potential injection surface for downstream applications, the skill recommends flattening and stringifying metadata which provides a basic level of sanitization.
  • [EXTERNAL_DOWNLOADS]: The code references standard, well-known libraries including firebase-admin and typeorm. No downloads from unknown or untrusted sources were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 10:41 AM