nestjs-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [DYNAMIC_EXECUTION]: The skill includes a TypeScript build script (
scripts/build-agents.ts) and a companion shell script (scripts/build.sh). These scripts are used to aggregate markdown files from therules/directory into a consolidatedAGENTS.mdfile. The scripts perform standard local file system operations (reading markdown files and writing the output) consistent with the skill's purpose as a documentation tool. - [INDIRECT_PROMPT_INJECTION]: The documentation uses impact labels like "CRITICAL" and "HIGH" to emphasize the importance of specific NestJS architectural patterns (e.g., dynamic modules and constructor injection). While these terms are often monitored in prompt injection contexts, here they are clearly scoped to coding best practices and do not attempt to override the AI agent's primary safety instructions or general behavior.
- [EXTERNAL_DOWNLOADS]: The documentation references external URLs for the official NestJS documentation and the
class-validatorlibrary on GitHub. These are well-known and trusted resources within the developer community and are used solely for supplemental information. - [COMMAND_EXECUTION]: The
scripts/package.jsonfile contains standard build commands usingtsx,ts-node, andnodemon. These are typical developer tools for executing TypeScript code during development and do not involve suspicious command chaining or obfuscated shell instructions.
Audit Metadata