nestjs-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content and best practices for the NestJS framework. It utilizes official references from docs.nestjs.com, prisma.io, and postgresql.org. All external resources traced back to legitimate framework repositories or official documentation.\n- [DATA_EXPOSURE_AND_EXFILTRATION]: No exfiltration patterns or hardcoded credentials were found. Code examples correctly demonstrate the secure handling of configuration and environment variables, including the validation of secrets during application bootstrap.\n- [REMOTE_CODE_EXECUTION]: No remote code execution vulnerabilities were identified. Mentioned CLI tools and deployment scripts are consistent with standard development workflows in the NestJS ecosystem.\n- [OBFUSCATION]: The content is presented in clear text with no evidence of encoded commands, hidden URLs, or homoglyph attacks. Git SHAs and standard metadata are not classified as obfuscation.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to assist with code quality and does not process untrusted external data in a way that would facilitate prompt injection attacks.
Audit Metadata