The Agent Skills Directory

[SAFE]: The skill provides standard architectural guidelines for NestJS development, emphasizing modularity, thin controllers, and business logic isolation in services.
[INDIRECT_PROMPT_INJECTION]: The skill defines patterns for handling external user input via DTOs (Data Transfer Objects) and controllers. It proactively addresses injection risks by recommending the use of the ValidationPipe with whitelist: true and forbidNonWhitelisted: true, ensuring that only expected data according to a defined schema is processed.
[SAFE]: Encourages secure data handling by utilizing ClassSerializerInterceptor, which ensures that sensitive internal fields (such as password hashes or audit trails) are not accidentally exposed in API responses.
[SAFE]: Recommends production-grade practices like environment variable validation at application startup and the use of explicit guards for authorization, reducing the risk of misconfiguration and unauthorized access.

nestjs-patterns