nestjs-api

Pass

Audited by Gen Agent Trust Hub on Aug 6, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill follows professional development standards, providing modular templates for NestJS development using TypeScript and Prisma ORM. No malicious patterns were identified.
  • [EXTERNAL_DOWNLOADS]: The skill references standard scaffolding tools like the NestJS CLI (npx @nestjs/cli) and well-known documentation sources such as Prisma's LLM-optimized documentation. All referenced Node.js packages in package.json templates are established, widely-used libraries from the official npm registry.
  • [CREDENTIALS_UNSAFE]: Security reference files correctly utilize placeholders for sensitive data (e.g., your-super-secret-jwt-key) and emphasize using .env files and environment variables rather than hardcoding credentials, which is a security best practice.
  • [PROMPT_INJECTION]: The 'Iron Law' and other instructional markers are benign operational constraints designed to guide the agent's output towards specific technical conventions, not attempts to bypass underlying safety filters.
  • [DATA_EXFILTRATION]: No unauthorized data transmission or exfiltration patterns were found. Network activities described (such as bullmq, kafkajs, or axios) are presented as standard architectural patterns for background jobs, streaming, and API communication within the application's intended scope.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 6, 2026, 01:53 PM
Security Audit — agent-trust-hub — nestjs-api