api-framework-nestjs
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive patterns for building structured APIs using NestJS, adhering to standard security practices such as modular separation of concerns and dependency injection.
- [SAFE]: It mandates the global configuration of ValidationPipe with whitelist: true and forbidNonWhitelisted: true, effectively preventing mass-assignment and parameter pollution vulnerabilities.
- [SAFE]: Promotes secure credential handling by recommending the use of @nestjs/config and environment variables instead of hardcoded secrets.
- [SAFE]: All identified dependencies and CLI commands are standard within the NestJS ecosystem and originate from well-known registries or the vendor's own infrastructure.
- [SAFE]: No evidence of prompt injection, obfuscation, unauthorized data access, or persistence mechanisms was found across any of the analyzed files.
Audit Metadata