nestjs-expert

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses diagnostic bash commands to identify the project environment, such as checking for specific dependencies in package.json and verifying configurations in tsconfig.json. It also suggests standard development commands like npm run build and npm run test for validation. These operations are appropriate for a developer-focused assistant.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze local project files including package.json and source code modules to adapt its advice. While this involves processing external data, the commands are limited to diagnostic lookups and standard build/test tasks within the local environment, presenting no significant security risk.
  • [REMOTE_CODE_EXECUTION]: The skill mentions and utilizes standard, well-known development tools and libraries like @nestjs/core, Jest, and Supertest. All external resources referenced are official documentation links (e.g., nestjs.com, typeorm.io) and well-known service repositories, which are considered safe.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 03:04 PM
Security Audit — agent-trust-hub — nestjs-expert