scaffolding-nestjs-app

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides templates and instructions for scaffolding NestJS services. It relies on industry-standard tools such as NestJS, Pino, Vitest, Husky, and Docker.
  • [SAFE]: All identified dependencies (e.g., nestjs-pino, class-validator, axios, eslint, vitest) are reputable, well-known packages in the Node.js ecosystem.
  • [SAFE]: Command execution is restricted to standard project initialization tasks, such as dependency installation and setting up git hooks (e.g., npx husky init, chmod +x for hooks), which is expected behavior for a scaffolding tool.
  • [SAFE]: No evidence of prompt injection, data exfiltration, obfuscation, or malicious persistence mechanisms was found in the templates or instructions.
  • [SAFE]: The skill includes documentation snippets (CLAUDE.md) that establish development conventions for future agent interactions, focusing on maintainability and transparency without introducing security risks.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 05:06 PM