nestjs-patterns
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard boilerplate and architectural guidance for NestJS development, following official framework best practices.
- [INDIRECT_PROMPT_INJECTION]: The skill acknowledges input surfaces (DTOs and controllers) and correctly recommends the use of
ValidationPipewithwhitelist: trueandforbidNonWhitelisted: trueto prevent unauthorized data injection and schema confusion. - [REMOTE_CODE_EXECUTION]: No remote code execution patterns, external downloads, or suspicious dependencies were found. The code snippets use standard framework decorators and classes.
- [CREDENTIALS_SAFE]: The skill correctly demonstrates using
ConfigModuleand environment variables for configuration instead of hardcoding sensitive information.
Audit Metadata