spring-boot-4-migration
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured guidance for Spring Boot migrations, including toolchain checks, property renames, and API relocations. The instructions use industry-standard methodologies for Java ecosystem upgrades.
- [COMMAND_EXECUTION]: The skill includes a verification script (
scripts/verify_migration.sh) and instructions to run build commands (mvn,gradle,sdk). These tools are used to validate the project's state and perform local compilations. The script's logic is restricted to local file scanning and standard build invocations, which is appropriate for its intended purpose. - [EXTERNAL_DOWNLOADS]: The skill references official Spring Framework documentation, well-known community blogs, and reputable automation tools like OpenRewrite. Automated migration recipes mentioned in the skill are retrieved via standard package managers (Maven/Gradle) from official repositories, which is considered a safe and standard development practice.
- [PROMPT_INJECTION]: The skill body contains clear, helpful instructions for the AI agent to follow a specific migration workflow. It does not contain any attempts to bypass safety filters or override the agent's core behavior in a malicious manner.
Audit Metadata