nestjs-expert
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use standard diagnostic and build tools to analyze and validate the project. Specific commands include environment checks using
test,grep, andfind, as well as project lifecycle scripts likenpm run build,npm run test, andnpm run test:e2e. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest local project files (e.g.,
package.json,tsconfig.json, and source code) to provide architectural advice, which is a standard operational surface for a coding assistant. It lacks explicit boundary markers for this data but operates within a developer-centric context. - [SAFE]: The instructions explicitly include security best practices, such as warning against the exposure of secrets through inspector ports or heap snapshots and emphasizing proper resource authorization beyond simple JWT verification.
Audit Metadata