nestjs-observability

Pass

Audited by Gen Agent Trust Hub on Sep 5, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill provides standard operational guidelines for NestJS observability using established libraries.
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external x-request-id headers for the purpose of log correlation, representing a common infrastructure pattern.
  • Ingestion points: The x-request-id header is ingested and propagated through the application context (SKILL.md).
  • Boundary markers: No specific delimiters are defined for the logging output, though this is standard for structured JSON logging.
  • Capability inventory: No dangerous capabilities such as file writing, shell execution, or unauthorized network access are present in the skill.
  • Sanitization: The skill demonstrates security best practices by including configuration for redacting sensitive fields (e.g., authorization headers, passwords, and tokens) from the logs in references/example.md.
  • [EXTERNAL_DOWNLOADS]: The skill references standard and reputable packages within the NestJS ecosystem for logging and metrics.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 5, 2026, 05:45 PM