nestjs-testing
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill references standard development commands in
references/improve-coverage.md, includingpnpm test:cov,npx eslint, andnpx jest. These are local execution patterns typical for a coding assistant providing test automation and quality assurance workflows within a project environment. - [INDIRECT_PROMPT_INJECTION]: The skill involves reading project source files to improve test coverage, creating an attack surface for indirect injection.
- Ingestion points: The agent is instructed to read
src/**/*.spec.ts,test/**/*.e2e-spec.ts, and project source files as defined inSKILL.mdandreferences/improve-coverage.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded instructions within the source code are provided.
- Capability inventory: The skill utilizes file system read/write access and local shell command execution for testing and linting.
- Sanitization: No specific sanitization or validation of the ingested code content is implemented.
Audit Metadata