nestjs-professional-software-engineering
Build and Verify Maintainable NestJS Software
NestJS changes can introduce incompatible syntax, hidden side effects, and public API regressions. This skill guides repository inspection, focused implementation, and evidence-based verification.
๋ด ์์ด์ ํธ๋ก ์ค์น
์ด ์์ฒญ์ ์์ด์ ํธ์ ๋ณต์ฌํ์ธ์. ๊ณต์ Skill ํ์ด์ง์ ๋งค๋ํ์คํธ๊ฐ ํฌํจ๋์ด ์์ต๋๋ค.
Review the Skillstore skill "nestjs-professional-software-engineering" from https://skillstore.io/skills/amirtaherkhani-nestjs-professional-software-engineering.md and its manifest at https://skillstore.io/api/skills/amirtaherkhani-nestjs-professional-software-engineering/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.์์ด์ ํธ๋ ๊ณ์ํด์ ๊ณํ์ ํ์ํ๊ณ ๋ณด์ ์ ์ฑ ์์ ์๊ตฌํ๋ ํ์ธ์ ์์ฒญํด์ผ ํฉ๋๋ค.
์์ด์ ํธ๊ฐ ์ฝ๊ธฐ ์ฌ์ด ๋ฆฌ์์ค
AI ์์ด์ ํธ, ํฌ๋กค๋ฌ, ์คํฌ๋ฆฝํธ๊ฐ ์ ์ฒด ํ์ด์ง ๋์ ์ ๋ฆฌ๋ ์ปจํ ์คํธ๋ง ํ์ํ ๋ ์ด ๋งํฌ๋ฅผ ์ฌ์ฉํ์ธ์.
ํ ์คํธํด ๋ณด๊ธฐ
"nestjs-professional-software-engineering" ์ฌ์ฉ ์ค์ ๋๋ค. Review a proposal that fetches account balances through a property getter.
์์ ๊ฒฐ๊ณผ:
- Finding: the getter conceals network I/O, latency, and failure from callers.
- Recommendation: use an explicit asynchronous operation with visible timeout and cancellation controls.
- Verification plan: cover successful responses, denied access, timeouts, and upstream failures.
"nestjs-professional-software-engineering" ์ฌ์ฉ ์ค์ ๋๋ค. Plan an additive payment capture helper while retaining the explicit execution API.
์์ ๊ฒฐ๊ณผ:
- Recommended design: delegate to the existing operation and preserve its result and error contracts.
- Caller controls: retain idempotency keys, timeout options, and cancellation behavior.
- Compatibility plan: keep both public forms available and test them against the same observable contract.
"nestjs-professional-software-engineering" ์ฌ์ฉ ์ค์ ๋๋ค. Explain verification limits when an integration service is unavailable.
์์ ๊ฒฐ๊ณผ:
- Verification boundary: local unit tests and type checks cannot establish external service compatibility.
- Remaining evidence: integration and runtime smoke checks require the unavailable service.
- Reporting rule: distinguish completed checks from blocked checks and do not report unexecuted checks as passed.
๋ณด์ ๊ฐ์ฌ
์์ All 14 static findings are false positives: Markdown skill names and ordinary API or testing guidance do not execute commands or conduct reconnaissance. The reviewed instructions require scoped changes, script inspection, authorized mutation, and accurate verification reports. No evidence found of prompt injection, credential exfiltration, or malicious intent.
์ํ ์์ธ
โ๏ธ ์ธ๋ถ ๋ช ๋ น์ด (6)
์ด ๋ณด๊ณ ์ ๊ณต์ ๋ฐ ์ธ์ฉ
๋ฒ์ ์ด ์ง์ ๋ ํ๊ฐ ๋ณด๊ณ ์, ์ค๋ฆฝ ๋ฐฐ์ง, ์๋ฒ ๋ ์นด๋ ๋ฐ ์ธ์ฉ์ ๊ณต์ ํ์ธ์. Skillstore๋ ๊ทผ๊ฑฐ๋ฅผ ๋ณด๊ณ ํ์ง๋ง ์ด Skill์ ์์ ์ฌ๋ถ๋ฅผ ํ๋จํ์ง ์์ต๋๋ค.
๋ณด๊ณ ์ ๋งํฌ ๋ณต์ฌ
https://skillstore.io/skills/amirtaherkhani-nestjs-professional-software-engineering/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown ๋ฐฐ์ง
[](https://skillstore.io/skills/amirtaherkhani-nestjs-professional-software-engineering?utm_source=security_passport_badge)HTML ๋ฐฐ์ง
<a href="https://skillstore.io/skills/amirtaherkhani-nestjs-professional-software-engineering?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/amirtaherkhani-nestjs-professional-software-engineering/security.svg" alt="Skillstore security assessment" loading="lazy"></a>์๋ฒ ๋ ์นด๋
<iframe src="https://skillstore.io/embed/skills/amirtaherkhani-nestjs-professional-software-engineering.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>ํ์ ์ธ์ฉ (APA ยท BibTeX ยท CFF)
APA ์ธ์ฉ
amirtaherkhani. (2026). nestjs-professional-software-engineering security audit report (audit version 1) [Author version 2.0.2]. Skillstore. https://skillstore.io/skills/amirtaherkhani-nestjs-professional-software-engineering/audits/1BibTeX ์ธ์ฉ
@techreport{amirtaherkhani-amirtaherkhani-nestjs-professional-software-engineering-2026,
author = {amirtaherkhani},
title = {nestjs-professional-software-engineering security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/amirtaherkhani-nestjs-professional-software-engineering/audits/1},
note = {Author version 2.0.2}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "nestjs-professional-software-engineering security audit report (audit version 1)"
version: "2.0.2"
type: report
authors:
- name: "amirtaherkhani"
date-released: "2026-10-04"
url: "https://skillstore.io/skills/amirtaherkhani-nestjs-professional-software-engineering/audits/1"
identifiers:
- type: other
value: "skillstore:amirtaherkhani-nestjs-professional-software-engineering:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore ์ ์
์ด ์ ์์ ์ด์ ์ฆ๊ฑฐ ์ ๋ขฐ๋: ์ค๊ฐ๋ง๋ค ์ ์๋ ๊ฒ
Implement an Existing-Service Feature
Add a NestJS feature using nearby patterns, compatible APIs, focused tests, and clear acceptance criteria.
Refine a Public TypeScript API
Evaluate convenience methods while preserving errors, cancellation, idempotency, and compatibility for existing consumers.
Review a High-Risk Change
Inspect behavior and verification gaps without editing files, then distinguish confirmed evidence from assumptions and unavailable checks.
์ด ํ๋กฌํํธ๋ฅผ ์ฌ์ฉํด ๋ณด์ธ์
Review this NestJS service for readability, input validation, and error handling. Inspect nearby conventions and report evidence without editing files.
Fix [bug] in this NestJS repository. Inspect callers and versions, add a regression test, preserve public behavior, and report executed checks.
Add [convenience method] alongside the existing explicit API. Compare supported syntax and preserve errors, timeouts, cancellation, and idempotency. Add shared contract tests.
Implement [feature] across these NestJS modules. Map ownership, consumers, authorization, transaction boundaries, and migration risks first. Resolve material conflicts before editing. Report verification gaps.
๋ชจ๋ฒ ์ฌ๋ก
- Provide acceptance criteria and public compatibility constraints before requesting implementation.
- Confirm installed versions and inspect project scripts before selecting syntax or running checks.
- Request focused tests first, then expand verification for security, persistence, concurrency, or cross-module changes.
ํผํ๊ธฐ
- Copying newer framework syntax without confirming compiler, runtime, and package support.
- Hiding network activity, authorization, retries, or state changes behind getters and convenience methods.
- Weakening checks or reporting unavailable integration tests as successful.
์์ฃผ ๋ฌป๋ ์ง๋ฌธ
Which AI tools can use this skill?
Does this package include a NestJS application?
Can I request a review without file changes?
How does it choose TypeScript or NestJS syntax?
Are the related NestJS skills required?
What happens when verification cannot run?
๊ฐ๋ฐ์ ์ธ๋ถ ์ ๋ณด
์์ฑ์
amirtaherkhani๋ผ์ด์ ์ค
MIT
์์ฑ์ ๋ฒ์
v2.0.2
Skillstore ๋ฆฌ๋น์
r1
๋ฆฌํฌ์งํ ๋ฆฌ
https://github.com/amirtaherkhani/nestjs-skills/tree/b82cdf0312e1c1bcaf871bb67473e91b2a1befad/skills/nestjs-professional-software-engineering์ฐธ์กฐ
c97a1862d1bc82763903ee068cd15acab35d638c
์ ์ง๋ณด์ ์ต์ ์ฑ
2026. 10. 5.
์ฌ์ฉ๋
0 ๋ค์ด๋ก๋ ยท 0 ์กฐํ
ํ์ผ ๊ตฌ์กฐ
๐ agents/
๐ openai.yaml
๐ evals/
๐ evals.json
๐ references/
๐ implementation-verification.md
๐ syntactic-sugar.md
๐ syntax-and-idioms.md
๐ SKILL.md