nestjs-dev-guidelines
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends several industry-standard libraries for logging, validation, and security, which are retrieved from the official NPM registry. These include well-known packages like Zod, class-validator, and @node-rs/argon2, which are integral to the described security patterns.
- [COMMAND_EXECUTION]: The guidelines include instructions for executing standard development and maintenance commands, such as package installation, database migration runs, and application bootstrapping. These are contextually appropriate for the intended use cases of the skill.
- [SAFE]: The documentation provides explicit defensive strategies against critical application vulnerabilities, including SQL injection through mandatory parameterization, IDOR via server-derived tenant scoping, and mass assignment through DTO whitelisting.
- [SAFE]: Guidelines for AI features promote security by treating all LLM outputs as untrusted data, requiring strict schema validation, and enforcing usage quotas to prevent resource abuse.
Audit Metadata