nest-server-updating

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches migration guides and configuration data from the vendor's official GitHub repository (github.com/lenneTech/nest-server). These downloads are directed to a well-known service and are necessary for the skill's primary purpose of providing up-to-date upgrade information.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes a process where an agent reads migration instructions from external markdown files on GitHub. This represents a data ingestion surface where external content could potentially influence the agent's actions during an update.
  • Ingestion points: github.com/lenneTech/nest-server/migration-guides/*.md and raw.githubusercontent.com.
  • Boundary markers: No explicit prompt boundary markers are defined for the agent to separate guide instructions from system instructions.
  • Capability inventory: The skill guides the use of pnpm for package installation, git for version control, and gh for repository interaction.
  • Sanitization: No explicit sanitization or validation of the remote markdown content is mentioned prior to processing by the agent.
  • [COMMAND_EXECUTION]: The skill instructs the agent and user to execute package management commands such as pnpm install, pnpm run update, and pnpm test. These operations are standard and essential for the intended functionality of maintaining and updating software projects.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 11:12 AM