nestjs-module-generator
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection by processing untrusted user input to perform code generation and configuration tasks with elevated tool permissions. * Ingestion points: The skill activates and processes requests based on user input mentioning 'nestjs module generator' as specified in the SKILL.md triggers. * Boundary markers: The instructions lack explicit delimiting markers or instructions to ignore embedded commands within user-provided data. * Capability inventory: The skill is configured with access to tools including Read, Write, Edit, Bash(cmd:*), and Grep according to the allowed-tools frontmatter. * Sanitization: There are no explicit instructions within the skill for sanitizing, escaping, or validating user-provided content before it is processed or used to generate outputs.
Audit Metadata