nestjs-expert
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill uses standard diagnostic shell commands to analyze project structure and dependencies.
- [COMMAND_EXECUTION]: The skill includes diagnostic commands such as
grep,test, andfindto inspect project configuration files likepackage.jsonandtsconfig.json. These are used appropriately for environmental detection. - [EXTERNAL_DOWNLOADS]: All external links point to official documentation (docs.nestjs.com, jestjs.io, mongoosejs.com, etc.) or well-known community platforms (GitHub, Stack Overflow) for reference purposes.
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it reads project files (package.json, module files) to adapt its behavior. However, it does not perform unsafe interpolation or execution of this data.
Audit Metadata