nestjs-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides extensive security guidance, specifically addressing critical vulnerabilities through best practices like SQL injection prevention (parameterized queries), cross-site scripting (XSS) mitigation (Helmet headers), and secure password hashing (Argon2 via Bun Crypto).
- [SAFE]: The instructions correctly emphasize the use of environment variables for secret management, explicitly advising against hardcoding credentials in source code.
- [SAFE]: All external dependencies mentioned in the installation steps (e.g., @nestjs/core, Prisma, Helmet, Throttler) are standard, reputable packages from the official registry.
- [SAFE]: The guide promotes secure architectural patterns, such as thin controllers and the repository pattern, which facilitate better code review and security testing.
- [SAFE]: No obfuscation, prompt injection attempts, or unauthorized network operations were found in the provided content.
Audit Metadata