nestjs-api
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows professional development standards, providing modular templates for NestJS development using TypeScript and Prisma ORM. No malicious patterns were identified.
- [EXTERNAL_DOWNLOADS]: The skill references standard scaffolding tools like the NestJS CLI (
npx @nestjs/cli) and well-known documentation sources such as Prisma's LLM-optimized documentation. All referenced Node.js packages inpackage.jsontemplates are established, widely-used libraries from the official npm registry. - [CREDENTIALS_UNSAFE]: Security reference files correctly utilize placeholders for sensitive data (e.g.,
your-super-secret-jwt-key) and emphasize using.envfiles and environment variables rather than hardcoding credentials, which is a security best practice. - [PROMPT_INJECTION]: The 'Iron Law' and other instructional markers are benign operational constraints designed to guide the agent's output towards specific technical conventions, not attempts to bypass underlying safety filters.
- [DATA_EXFILTRATION]: No unauthorized data transmission or exfiltration patterns were found. Network activities described (such as
bullmq,kafkajs, oraxios) are presented as standard architectural patterns for background jobs, streaming, and API communication within the application's intended scope.
Audit Metadata