nestjs-best-practices

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFE
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill includes a TypeScript build script (scripts/build-agents.ts) and a companion shell script (scripts/build.sh). These scripts are used to aggregate markdown files from the rules/ directory into a consolidated AGENTS.md file. The scripts perform standard local file system operations (reading markdown files and writing the output) consistent with the skill's purpose as a documentation tool.
  • [INDIRECT_PROMPT_INJECTION]: The documentation uses impact labels like "CRITICAL" and "HIGH" to emphasize the importance of specific NestJS architectural patterns (e.g., dynamic modules and constructor injection). While these terms are often monitored in prompt injection contexts, here they are clearly scoped to coding best practices and do not attempt to override the AI agent's primary safety instructions or general behavior.
  • [EXTERNAL_DOWNLOADS]: The documentation references external URLs for the official NestJS documentation and the class-validator library on GitHub. These are well-known and trusted resources within the developer community and are used solely for supplemental information.
  • [COMMAND_EXECUTION]: The scripts/package.json file contains standard build commands using tsx, ts-node, and nodemon. These are typical developer tools for executing TypeScript code during development and do not involve suspicious command chaining or obfuscated shell instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 01:19 AM