scaffolding-nestjs-app
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides templates and instructions for scaffolding NestJS services. It relies on industry-standard tools such as NestJS, Pino, Vitest, Husky, and Docker.
- [SAFE]: All identified dependencies (e.g., nestjs-pino, class-validator, axios, eslint, vitest) are reputable, well-known packages in the Node.js ecosystem.
- [SAFE]: Command execution is restricted to standard project initialization tasks, such as dependency installation and setting up git hooks (e.g.,
npx husky init,chmod +xfor hooks), which is expected behavior for a scaffolding tool. - [SAFE]: No evidence of prompt injection, data exfiltration, obfuscation, or malicious persistence mechanisms was found in the templates or instructions.
- [SAFE]: The skill includes documentation snippets (
CLAUDE.md) that establish development conventions for future agent interactions, focusing on maintainability and transparency without introducing security risks.
Audit Metadata