nestjs-app-metrics

Pass

Audited by Gen Agent Trust Hub on Mar 6, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a technical reference for observability in NestJS applications. It contains documentation, code snippets, and Grafana dashboard templates.
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing official and well-known libraries from the OpenTelemetry project and NestJS ecosystem via NPM. It also references official Docker images for infrastructure exporters like Prometheus, Grafana, and PostgreSQL.
  • [COMMAND_EXECUTION]: The skill includes standard commands for package installation (npm install) and infrastructure setup via docker-compose. These are typical for developer tools and do not involve suspicious or obfuscated execution patterns.
  • [CREDENTIALS_UNSAFE]: While the skill includes database connection strings in its documentation (e.g., for postgres-exporter), these use clearly labeled placeholders such as postgres_user and postgres_password, which do not pose a security risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 6, 2026, 04:47 PM