springboot-verification
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill documents standard development practices for Spring Boot applications, including automated testing and linting.
- [COMMAND_EXECUTION]: The skill uses standard build tools such as Maven and Gradle and version control commands via Git for project verification. These operations are within the expected scope of a development workflow.
- [EXTERNAL_DOWNLOADS]: The skill references the well-known postgres:16-alpine Docker image for integration testing via Testcontainers, which is a standard industry practice.
- [INDIRECT_PROMPT_INJECTION]: The skill processes project source code and configuration files which could contain instructions. Ingestion points: Java source code, YAML/properties configuration, and Git diffs. Capability inventory: Executes shell commands via Maven, Gradle, and Git. Boundary markers: None. Sanitization: None. The risk is considered safe as the tools are used for their intended purpose in a local development environment.
Audit Metadata