nestjs
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of architectural guidelines and code templates for NestJS development, following standard industry practices.
- [CREDENTIALS_UNSAFE]: The documentation correctly recommends using a configuration service for secrets (e.g., configService.get('jwt.secret')) and hashing passwords with bcrypt before storage, avoiding hardcoded credentials.
- [EXTERNAL_DOWNLOADS]: The skill references standard, reputable Node.js packages such as @nestjs/jwt, @nestjs/passport, ioredis, and @nestjs/swagger, which are appropriate for the described technical stack.
- [COMMAND_EXECUTION]: All code snippets provide standard application logic for controllers and services without any suspicious subprocess calls or shell command injections.
- [DATA_EXFILTRATION]: No network operations to unknown or suspicious domains were found; communication patterns are restricted to standard database (MySQL) and cache (Redis) interactions typical of a backend service.
Audit Metadata