nestjs-expert

Pass

Audited by Gen Agent Trust Hub on Sep 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses diagnostic commands such as grep, find, sed, and xargs to identify framework versions and project module structures. These tools are used solely for information gathering and project adaptation.
  • [INDIRECT_PROMPT_INJECTION]: The skill analyzes local project code to provide tailored architectural advice.
  • Ingestion points: package.json, nest-cli.json, tsconfig.json, and file paths under the src/ directory.
  • Boundary markers: Absent; the skill does not explicitly instruct the agent to disregard instructions potentially found within the analyzed codebase.
  • Capability inventory: Includes execution of local build and test scripts via npm run and the nest CLI.
  • Sanitization: Absent; diagnostic output is processed for versioning and module identification without additional filtering.
  • [EXTERNAL_DOWNLOADS]: The skill mentions and recommends well-known, industry-standard packages such as @nestjs/core, Jest, and Passport. These dependencies originate from trusted registries and official framework ecosystems.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 5, 2026, 07:30 AM
Security Audit — agent-trust-hub — nestjs-expert