nest-server-updating
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches migration guides and configuration data from the vendor's official GitHub repository (
github.com/lenneTech/nest-server). These downloads are directed to a well-known service and are necessary for the skill's primary purpose of providing up-to-date upgrade information. - [INDIRECT_PROMPT_INJECTION]: The skill describes a process where an agent reads migration instructions from external markdown files on GitHub. This represents a data ingestion surface where external content could potentially influence the agent's actions during an update.
- Ingestion points:
github.com/lenneTech/nest-server/migration-guides/*.mdandraw.githubusercontent.com. - Boundary markers: No explicit prompt boundary markers are defined for the agent to separate guide instructions from system instructions.
- Capability inventory: The skill guides the use of
pnpmfor package installation,gitfor version control, andghfor repository interaction. - Sanitization: No explicit sanitization or validation of the remote markdown content is mentioned prior to processing by the agent.
- [COMMAND_EXECUTION]: The skill instructs the agent and user to execute package management commands such as
pnpm install,pnpm run update, andpnpm test. These operations are standard and essential for the intended functionality of maintaining and updating software projects.
Audit Metadata