nestjs-expert
Fail
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: CRITICAL
Full Analysis
- [SAFE]: The skill provides standard, industry-recognized code patterns for the NestJS framework, including dependency injection, JWT authentication, and TypeORM integration. All code snippets are educational and follow architectural best practices.
- [SAFE]: Instructions explicitly mandate security best practices, such as using NestJS ConfigModule for environment variables, implementing global validation pipes to prevent mass assignment/injection, and avoiding the exposure of internal stack traces or passwords in responses.
- [SAFE]: Automated scanner alerts regarding the author's documentation URL (jeffallan.github.io) and the SKILL.md file are assessed as false positives. The URL is a legitimate GitHub Pages site belonging to the skill's author used for hosting documentation, and the file content contains only standard markdown and boilerplate code.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata