nest-boot-logger
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is purely instructional and follows security-first principles for logging and debugging.
- [EXTERNAL_DOWNLOADS]: The documentation references the installation of the @nest-boot/logger package. As a resource belonging to the skill's author (nest-boot), it is documented neutrally as a functional requirement for the skill.
- [INDIRECT_PROMPT_INJECTION]: The skill handles untrusted user data when an agent uses it to generate logging code for a project. The skill mitigates this surface by providing the following framework: 1. Ingestion points: User prompts requesting logging logic as seen in the evaluation scenarios. 2. Boundary markers: Encourages use of structured bindings for specific metadata instead of logging raw strings. 3. Capability inventory: Logs are emitted via the Logger provider to a standard output stream or log aggregator. 4. Sanitization: Includes specific prohibitions against logging Authorization headers, Cookies, and un-sanitized error objects.
Audit Metadata