nestjs-observability
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill provides standard operational guidelines for NestJS observability using established libraries.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external x-request-id headers for the purpose of log correlation, representing a common infrastructure pattern.
- Ingestion points: The x-request-id header is ingested and propagated through the application context (SKILL.md).
- Boundary markers: No specific delimiters are defined for the logging output, though this is standard for structured JSON logging.
- Capability inventory: No dangerous capabilities such as file writing, shell execution, or unauthorized network access are present in the skill.
- Sanitization: The skill demonstrates security best practices by including configuration for redacting sensitive fields (e.g., authorization headers, passwords, and tokens) from the logs in references/example.md.
- [EXTERNAL_DOWNLOADS]: The skill references standard and reputable packages within the NestJS ecosystem for logging and metrics.
Audit Metadata