nestjs-expert
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses diagnostic bash commands to identify the project environment, such as checking for specific dependencies in
package.jsonand verifying configurations intsconfig.json. It also suggests standard development commands likenpm run buildandnpm run testfor validation. These operations are appropriate for a developer-focused assistant. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze local project files including
package.jsonand source code modules to adapt its advice. While this involves processing external data, the commands are limited to diagnostic lookups and standard build/test tasks within the local environment, presenting no significant security risk. - [REMOTE_CODE_EXECUTION]: The skill mentions and utilizes standard, well-known development tools and libraries like
@nestjs/core,Jest, andSupertest. All external resources referenced are official documentation links (e.g., nestjs.com, typeorm.io) and well-known service repositories, which are considered safe.
Audit Metadata