nestjs-expert
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The file
references/migration-from-express.mdcontains a hardcoded absolute local file path:/Users/dmitry/Projects/claude-skills/skills/legacy-modernizer/references/strangler-fig-pattern.md. While this reveals the directory structure of the author's development environment, it does not expose user data or system credentials. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied requirements and potentially legacy codebases to generate NestJS implementations, creating a standard injection surface.
- Ingestion points: User requirements and legacy Express.js source code provided during migration tasks (documented in
SKILL.mdandreferences/migration-from-express.md). - Boundary markers: The instructions do not define specific delimiters for separating user-provided source code from instructions.
- Capability inventory: The skill is purely generative and does not utilize dangerous tools, subprocess calls, or network operations.
- Sanitization: The skill explicitly mandates safety controls in generated code, requiring the use of
class-validatordecorators andValidationPipeto sanitize inputs in the resulting application.
Audit Metadata