building-nestjs-controllers

Pass

Audited by Gen Agent Trust Hub on May 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a technical reference for NestJS development, providing templates for controllers, Data Transfer Objects (DTOs), and OpenAPI (Swagger) documentation. All provided code snippets follow industry standard patterns for web development.
  • [INDIRECT_PROMPT_INJECTION]: While the skill provides instructions for handling untrusted web input (via HTTP controllers), it explicitly recommends the use of ValidationPipe and class-validator to sanitize and validate incoming data, effectively mitigating injection risks in the implementations generated by the agent. There are no executable scripts within the skill itself that ingest untrusted data.
  • [EXTERNAL_DOWNLOADS]: The documentation references standard, reputable development packages such as @nestjs/swagger and industry-standard linting tools like spectral and oasdiff. These are listed in a documentation context for developer setup and do not involve silent or malicious background downloads.
Audit Metadata
Risk Level
SAFE
Analyzed
May 4, 2026, 07:44 AM
Security Audit — agent-trust-hub — building-nestjs-controllers