nestjs-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to guide the agent in reading, analyzing, and refactoring NestJS source code. This creates a surface where malicious instructions could be embedded in the code being analyzed (e.g., within comments or string literals) to influence the agent's behavior.
- Ingestion points: The agent ingests and processes source code files from the user's workspace as instructed throughout the rule files in the
rules/directory. - Boundary markers: The skill does not provide instructions to the agent to treat processed code as untrusted data or to use specific delimiters or warnings to ignore commands found within the analyzed files.
- Capability inventory: The agent applies these rules while having capabilities to read and modify files within the user's environment.
- Sanitization: While the skill recommends sanitizing application-level user input (e.g., in
rules/security-sanitize-output.md), it does not define validation or escaping protocols for the agent's own ingestion of the codebase.
Audit Metadata