alibaba-java-coding-guidelines-skill
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes validation scripts (
scripts/validate_skill.py,scripts/validate_skill.mjs,scripts/validate_skill.go) and a shell script (tests/test_validators.sh). These scripts are designed for local structure verification. They perform read-only operations on the skill's own files to ensure mandatory sections are present and naming conventions are followed. They do not execute external commands or untrusted code. - [EXTERNAL_DOWNLOADS]: The skill documentation refers to the official Alibaba Java Coding Guidelines hosted on GitHub Pages (
https://alibaba.github.io/Alibaba-Java-Coding-Guidelines/). These are informational links to established documentation and do not involve the automated download or execution of remote assets. - [PROMPT_INJECTION]: The instructions in
SKILL.mdandreferences/are strictly focused on Java programming best practices, SQL optimization, and project structure. There are no attempts to bypass safety filters or override system instructions. - [DATA_EXFILTRATION]: No network operations or credential harvesting patterns were found. The skill documentation mentions standard local paths for installation (e.g.,
~/.claude/skills/), which is normal for developer tooling documentation.
Audit Metadata