quarkus-verification
Pass
Audited by Gen Agent Trust Hub on May 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to execute several standard build and security tools, including Maven, Gradle, Docker, and OWASP ZAP. These operations are intended for local development and CI/CD environments to ensure project quality and security.
- [EXTERNAL_DOWNLOADS]: Fetches security scanning images from Docker Hub (OWASP, Trivy, Grype) and project dependencies via Maven/Gradle. These downloads originate from well-known, trusted registries and are standard for the described workflow.
- [REMOTE_CODE_EXECUTION]: An automated scan flagged a download from
http://localhost:8080/q/openapi. Analysis confirms this is a standard local request to retrieve a project's own OpenAPI specification for documentation and security scanning purposes; it does not involve the execution of untrusted remote code.
Audit Metadata