nestjs-best-practices

Warn

Audited by Runlayer on Feb 26, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
88%
Files
53
Flagged
5
Chunks
71
Flagged Files (5)
nestjs-best-practices/AGENTS.mdMEDIUM
88.0%

Tool passed security scan

Malicious tool definition detected

**Incorrect (multiple saves without transaction):** ```typescript // Multiple saves without transaction @Injectable() export class OrdersService { async createOrder(userId: string, items: OrderItem[]): Promise<Order> { // If any step fails, data is inconsistent const order = await this.orderRepo.save({ userId, status: 'pending' }); for (const item of items) { await this.orderItemRepo.save({ orderId: order.id, ...item }); await this.inventoryRepo.decrement({ productId: item.productId }, 'stock',

Tool: nestjs-best-practices/AGENTS.md [18/18] Description: true, generateId: true, }, }), ], }) export class AppModule {} // Middleware to set request context @Injectable() export class RequestContextMiddleware implements NestMiddleware { constructor(private cls: ClsService) {} use(req: Request, res: Response, next: NextFunction): void { const requestId = req.headers['x-request-id'] || randomUUID(); this.cls.set('requestId', requestId); this.cls.set('userId', req.user?.id); res.setHeader('x-requ

nestjs-best-practices/.github/workflows/branch-protection.ymlLOW
72.7%

Malicious tool definition detected

run: | echo "::error::Merging 'docs' branch into 'main' is not allowed." echo "" echo "The 'docs' branch contains the documentation website which should" echo "remain separate from the main skill files to keep installations lightweight." echo "" echo "If you need to sync changes, cherry-pick specific commits instead." exit 1 - name: Branch check passed if: github.head_ref != 'docs' run: echo "Branch check passed - not merging from docs branch"

nestjs-best-practices/scripts/build-agents.tsLOW
65.7%

Tool passed security scan

nestjs-best-practices/scripts/build.shLOW
58.3%

Tool passed security scan

nestjs-best-practices/rules/db-use-migrations.mdLOW
51.6%

Tool passed security scan

Passed Files (48)Click to expand
nestjs-best-practices/rules/security-sanitize-output.mdOK
47.2%

Tool passed security scan

nestjs-best-practices/rules/devops-use-logging.mdOK
45.0%

Tool passed security scan

nestjs-best-practices/rules/devops-use-config-module.mdOK
43.5%

Tool passed security scan

nestjs-best-practices/rules/api-use-dto-serialization.mdOK
37.7%

Tool passed security scan

nestjs-best-practices/rules/security-auth-jwt.mdOK
36.7%

Tool passed security scan

nestjs-best-practices/.gitignoreOK
33.0%

Tool passed security scan

nestjs-best-practices/rules/db-use-transactions.mdOK
28.6%

Tool passed security scan

nestjs-best-practices/rules/api-versioning.mdOK
26.0%

Tool passed security scan

nestjs-best-practices/rules/devops-graceful-shutdown.mdOK
24.2%

Tool passed security scan

nestjs-best-practices/rules/di-liskov-substitution.mdOK
22.8%

Tool passed security scan

nestjs-best-practices/scripts/package-lock.jsonOK
22.5%

Tool passed security scan

nestjs-best-practices/metadata.jsonOK
21.5%

Tool passed security scan

nestjs-best-practices/rules/perf-use-caching.mdOK
21.4%

Tool passed security scan

nestjs-best-practices/rules/security-rate-limiting.mdOK
20.9%

Tool passed security scan

nestjs-best-practices/rules/micro-use-health-checks.mdOK
20.4%

Tool passed security scan

nestjs-best-practices/rules/micro-use-queues.mdOK
19.1%

Tool passed security scan

nestjs-best-practices/.github/workflows/deploy.ymlOK
19.0%

Tool passed security scan

nestjs-best-practices/rules/api-use-interceptors.mdOK
18.6%

Tool passed security scan

nestjs-best-practices/rules/arch-use-repository-pattern.mdOK
18.6%

Tool passed security scan

nestjs-best-practices/SKILL.mdOK
15.8%

Tool passed security scan

nestjs-best-practices/README.mdOK
15.6%

Tool passed security scan

nestjs-best-practices/rules/security-validate-all-input.mdOK
13.7%

Tool passed security scan

nestjs-best-practices/scripts/package.jsonOK
12.6%

Tool passed security scan

nestjs-best-practices/rules/micro-use-patterns.mdOK
11.7%

Tool passed security scan

nestjs-best-practices/rules/perf-optimize-database.mdOK
11.5%

Tool passed security scan

nestjs-best-practices/rules/arch-use-events.mdOK
11.4%

Tool passed security scan

nestjs-best-practices/rules/arch-feature-modules.mdOK
10.7%

Tool passed security scan

nestjs-best-practices/rules/arch-module-sharing.mdOK
10.6%

Tool passed security scan

nestjs-best-practices/rules/error-handle-async-errors.mdOK
10.5%

Tool passed security scan

nestjs-best-practices/rules/error-use-exception-filters.mdOK
8.6%

Tool passed security scan

nestjs-best-practices/rules/db-avoid-n-plus-one.mdOK
7.2%

Tool passed security scan

nestjs-best-practices/rules/test-e2e-supertest.mdOK
7.2%

Tool passed security scan

nestjs-best-practices/rules/arch-single-responsibility.mdOK
6.8%

Tool passed security scan

nestjs-best-practices/rules/di-avoid-service-locator.mdOK
6.7%

Tool passed security scan

nestjs-best-practices/rules/error-throw-http-exceptions.mdOK
6.6%

Tool passed security scan

nestjs-best-practices/rules/di-prefer-constructor-injection.mdOK
6.2%

Tool passed security scan

nestjs-best-practices/rules/api-use-pipes.mdOK
6.1%

Tool passed security scan

nestjs-best-practices/rules/perf-lazy-loading.mdOK
6.0%

Tool passed security scan

nestjs-best-practices/rules/di-scope-awareness.mdOK
5.7%

Tool passed security scan

nestjs-best-practices/rules/security-use-guards.mdOK
5.5%

Tool passed security scan

nestjs-best-practices/rules/di-interface-segregation.mdOK
5.5%

Tool passed security scan

nestjs-best-practices/rules/arch-avoid-circular-deps.mdOK
4.6%

Tool passed security scan

nestjs-best-practices/rules/di-use-interfaces-tokens.mdOK
4.3%

Tool passed security scan

nestjs-best-practices/rules/test-use-testing-module.mdOK
3.6%

Tool passed security scan

nestjs-best-practices/rules/_sections.mdOK
3.6%

Tool passed security scan

nestjs-best-practices/rules/test-mock-external-services.mdOK
2.6%

Tool passed security scan

nestjs-best-practices/rules/perf-async-hooks.mdOK
2.5%

Tool passed security scan

nestjs-best-practices/rules/_template.mdOK
0.6%

Tool passed security scan

Audit Metadata
Max File Score
88%
Classification
KNOWN_SERVER_ALL_UNKNOWN
Files Scanned
53
Files Flagged
5
Chunks Analyzed
71
Analyzed
Feb 26, 2026, 04:28 PM
Security Audit — runlayer — nestjs-best-practices