skill-nestjs-api

A set of development patterns for REST APIs built with NestJS and TypeScript, using Prisma for database access and Swagger for API documentation.

In plain words
What is it for?
Use it to build, extend, migrate, or review NestJS APIs with database access, security, automatically generated OpenAPI documentation, and Jest or Supertest tests.
Why use it?
It gives API work a consistent structure for modules, validation, authentication, errors, rate limits, and tests. REST APIs are web services organized around resources and HTTP requests.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/dewtech-technologies/dare-method/skill-nestjs-api
Any agent
npx skills add dewtech-technologies/dare-method --skill skill-nestjs-api
Clone the repo
git clone --depth 1 https://github.com/dewtech-technologies/dare-method

Made for: Claude Code, Codex.

Per session 67 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,377 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00067 $0.02377
Opus 5 $0.00034 $0.01189
Sonnet 5 $0.00013 $0.00475
Haiku 4.5 $0.00007 $0.00238

Measured 2d ago against content hash 0fa4bb49e0e8, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

skill-nestjs-api scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

implementations/antigravity/.agents/skills/skill-nestjs-api/SKILL.md · 327 lines

How it starts

The opening of the file, as written. The whole thing — 327 lines — stays where its author put it; the contents beside it link to each section on GitHub.

DARE NestJS API Skill

Você é um desenvolvedor sênior TypeScript / NestJS especializado em APIs REST. Seu objetivo é gerar código idiomático Nest, fortemente tipado, com auth/autz robustos e OpenAPI auto-gerado, seguindo Layered Design DARE.

Quando usar

  • Projeto NestJS novo via DARE
  • Adicionar feature em API NestJS existente
  • Migrar API Express clássica para NestJS
  • Auditar projeto NestJS para conformidade DARE

Stack canônica

  • TypeScript 5.5+ com strict: true
  • NestJS 11.x (módulos, providers, DI)
  • Prisma 5.x ORM (PostgreSQL ou MySQL)
  • class-validator + class-transformer para DTOs
  • @nestjs/swagger para OpenAPI auto-gerado
  • @nestjs/throttler para rate limiting
  • @nestjs/passport + @nestjs/jwt para auth
  • Jest + Supertest para testes
  • ESLint + Prettier para formatação

Layered Design em NestJS

Cada módulo segue:

src/<feature>/
├── <feature>.module.ts          ← define providers, controllers
├── <feature>.controller.ts      ← Handler
├── <feature>.service.ts         ← Service (uma operação) ou facade
├── <feature>.repository.ts      ← Repository (Prisma)
├── dto/
│   ├── create-<feature>.dto.ts  ← class-validator
│   └── update-<feature>.dto.ts
├── entities/
│   └── <feature>.entity.ts      ← Model
└── tests/
    ├── <feature>.service.spec.ts  ← unit
    └── <feature>.e2e-spec.ts      ← E2E

Controllers (Handler)

import { Body, Controller, Post, UseGuards } from '@nestjs/common';
import { ApiTags, ApiOperation, ApiCreatedResponse } from '@nestjs/swagger';
import { JwtAuthGuard } from '@/auth/jwt-auth.guard';
import { CreateUserDto } from './dto/create-user.dto';
import { UserResponseDto } from './dto/user-response.dto';
import { RegisterUserService } from './register-user.service';

@ApiTags('users')
@Controller('users')
@UseGuards(JwtAuthGuard)
export class UsersController {
  constructor(private readonly register: RegisterUserService) {}

  @Post()
  @ApiOperation({ summary: 'Criar novo usuário' })
  @ApiCreatedResponse({ type: UserResponseDto })
  async create(@Body() dto: CreateUserDto): Promise<UserResponseDto> {
    const user = await this.register.execute(dto);
    return UserResponseDto.from(user);
  }
}

Read the full file on GitHub · 327 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 327 lines · 67 tokens per session scan A 0fa4bb49e0e8

Subscribe to this mod's changes

skill-nestjs-api is a skill published in the GitHub repository dewtech-technologies/dare-method (5 stars, last pushed 1mo ago), licensed MIT. It adds 67 tokens to every session and 2,377 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

write-test-plan

Generate a QA/UAT test plan from product specifications and task definitions, covering acceptance testing, integration flows, and exploratory testing. Unit tests are out of scope (handled by write-unit-tests skill).

andresharpe/dotbot · 43 tokens

implement-telegram-bot

Implement Telegram bot interactions with command handlers, message parsing, and inline keyboards for conversational interfaces.

andresharpe/dotbot · 23 tokens

setup-background-job

Set up scheduled background jobs using Quartz.NET with proper configuration, error handling, and dependency injection.

andresharpe/dotbot · 22 tokens

write-unit-tests

Write comprehensive unit tests with proper setup, assertions, and coverage of happy paths, edge cases, and error scenarios.

andresharpe/dotbot · 26 tokens

blazor-component-design

Design Blazor components with proper parameter binding, event callbacks, lifecycle management, and render optimization. Use when creating new Blazor Server or WASM components, refactoring component hierarchies, implementing cascading values, or optimizing component rendering performance.

andresharpe/dotbot · 53 tokens

hedgehog-planning-intake

Use on any core for first-run planning intake — Phase 0 runs the vendored BMAD-METHOD planning shelf, shared by every core, and Phase 1 (mining 04-prd.md into intent records plus the Add-ons/sync-and-remote-entities decision) is full-stack-app's and pwa-app's shared procedure — identical mechanics, a different…

skyf0xx/hedgehog · 374 tokens