nest-boot-maintainer
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard development commands using
pnpm,nx,jest,git, and the GitHub CLI (gh). These commands are used for local diagnostics, running package tests, and interacting with thenest-boot/nest-bootrepository. The skill documentation includes specific security advice to avoid shell interpolation when creating GitHub issues. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external data in the form of bug reports, reproduction code, and logs from consumer projects. This creates an attack surface for indirect prompt injection. However, the workflow mitigates this risk by requiring the agent to reproduce issues locally, de-sensitize data before submission, and cross-reference findings with the official framework source code.
Audit Metadata