nest-boot-queue

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill documents a Redis queue implementation using standard tools like BullMQ and Zod. All dependencies identified are either well-known open-source packages or official libraries belonging to the skill's author (@nest-boot).
  • [DATA_EXPOSURE]: The skill's evaluation criteria explicitly include best practices for logging, such as avoiding the recording of full payloads or sensitive credentials in job handlers.
  • [INDIRECT_PROMPT_INJECTION]: The documentation recognizes that queue job data is an untrusted ingestion point. It explicitly advises developers that identifiers within a job payload (like userId or workspaceId) must not be implicitly trusted for authorization and should instead be validated against a trusted source of truth in the service layer.
  • [COMMAND_EXECUTION]: The skill uses a vendor-specific CLI tool nb queue:start for managing worker processes, which is consistent with the framework's architecture.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 03:15 PM