nestjs-queue-architect
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The provided code snippets and architectural guidelines follow industry standards for NestJS application development and Redis-backed job processing.
- [PROMPT_INJECTION]: The skill documents an architecture that processes untrusted data from an external job queue (BullMQ), which constitutes a potential surface for indirect prompt injection.
- Ingestion points: The
processmethod inreferences/full-guide.mdingestsVideoJobDatacontaining parameters likecaptionContent,text, andmetadatawhich enter the system context via job definitions. - Boundary markers: Absent from the provided code templates; job data is processed as trusted internal structures without delimiters.
- Capability inventory: S3 file download/upload (via
s3Service), FFmpeg processing (viaffmpegService), Redis Pub/Sub messaging, and WebSocket emissions. - Sanitization: Not demonstrated in the example code; the implementation assumes parameters like
s3KeyandingredientIdare sanitized before use.
Audit Metadata