The Agent Skills Directory

[SAFE]: The skill enforces robust security practices for NestJS development, emphasizing architectural constraints that minimize common vulnerabilities.
[SAFE]: Configuration management is handled via the @nestjs/config module with schema validation (Zod), explicitly advising against direct process.env access and hardcoded secrets.
[SAFE]: Input validation is mandated at the controller boundary using Data Transfer Objects (DTOs) with class-validator and the global ValidationPipe to ensure data integrity.
[SAFE]: The provided Docker configurations utilize multi-stage builds and implement a non-root user ('app') for the production stage, adhering to the principle of least privilege.
[SAFE]: Database patterns (TypeORM/Prisma) focus on type-safe operations and parameterization, with specific guardrails against high-risk operations like synchronize: true in production environments.
[SAFE]: Logging guidelines recommend structured logging via nestjs-pino and explicitly prohibit the logging of Personally Identifiable Information (PII).

nestjs