nestjs-expert

Pass

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use standard diagnostic and build tools to analyze and validate the project. Specific commands include environment checks using test, grep, and find, as well as project lifecycle scripts like npm run build, npm run test, and npm run test:e2e.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest local project files (e.g., package.json, tsconfig.json, and source code) to provide architectural advice, which is a standard operational surface for a coding assistant. It lacks explicit boundary markers for this data but operates within a developer-centric context.
  • [SAFE]: The instructions explicitly include security best practices, such as warning against the exposure of secrets through inspector ports or heap snapshots and emphasizing proper resource authorization beyond simple JWT verification.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 26, 2026, 11:02 PM