nest-boot-temporary-directory
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: Ingests untrusted data via file uploads (Multer) and directory namespace parameters in SKILL.md. Boundary markers include isolated, request-scoped temporary directories that are automatically deleted. Capability inventory includes file system writes (writeFile) and directory management. Sanitization is enforced by restricting namespaces to a strict 1-64 character ASCII set.
- [COMMAND_EXECUTION]: Includes standard Node.js file system operations (writeFile, rm) necessary for temporary file management. These operations are restricted to the system's temporary directory (os.tmpdir()) rather than the application workspace.
- [DYNAMIC_EXECUTION]: Uses NestJS ModuleRef.create to dynamically instantiate Multer interceptors. This is a recommended framework pattern that ensures security configurations (like file size limits) are correctly inherited from the application's global modules.
Audit Metadata