OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
This skill is a development tool for generating NestJS CRUD modules. While it correctly performs its intended function, the code generation script lacks sanitization for user-provided field names, creating a potential surface for code injection in the generated output. The skill subsequently executes this generated code during tests, which is a standard development workflow but carries inherent risk if processing untrusted definitions.
Detected behaviors
1 alert: gptAnomaly
No issues
3/8 files flagged
Score: 93/100 · 2 sections analyzed