The Agent Skills Directory

[SAFE]: The skill's primary focus is providing educational content and architectural guidance for NestJS development. No instructions attempting to bypass safety filters or exfiltrate data were identified.
[SAFE]: All code examples for sensitive operations, such as JWT authentication and database interactions, utilize secure practices. Specifically, secrets are managed via ConfigService rather than hardcoding, and password hashing is performed using bcrypt.
[SAFE]: No obfuscation, multi-layer encoding, or hidden Unicode characters were detected in any of the skill files.
[SAFE]: The skill recommends standard developer tools and commands (npm run lint, npm run test, nest info) which are appropriate for its stated purpose as a backend development assistant.
[INDIRECT_PROMPT_INJECTION]: The skill analyzes user-provided requirements to generate code. While this presents a standard attack surface where malicious input could influence code generation, the risk is mitigated by the skill's strict adherence to typed DTOs and validation pipes.
Ingestion points: Project requirements and Express codebases (processed in SKILL.md and references/migration-from-express.md).
Boundary markers: None explicitly defined, but usage of DTOs and class-validators is mandated.
Capability inventory: Code generation and local execution of linting/testing tools.
Sanitization: Relies on NestJS ValidationPipe and class-validator as a primary architectural constraint.

nestjs-expert