nestjs-typeorm-integration
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill follows security best practices by instructing the agent to store sensitive database credentials in environment variables rather than hardcoding them in the application source code.
- [SAFE]: It explicitly warns against using database synchronization in production environments, advocating for a controlled migration-based approach to prevent accidental schema changes.
- [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it processes existing project files like CLAUDE.md and TypeScript source code to inform its refactoring and generation tasks. Ingestion points: Project configuration and source files. Boundary markers: No specific delimiters are used to wrap ingested project content. Capability inventory: File writing, project configuration, and repository management. Sanitization: The skill does not implement specific sanitization for instructions that might be embedded in the code it reads.
Audit Metadata