spring-boot-4-migration
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and modify project source code and build configurations, which constitutes a potential surface for indirect prompt injection if the processed codebase contains malicious instructions. However, this interaction is a necessary part of the migration process.
- [COMMAND_EXECUTION]: The skill utilizes local build tool commands (Maven/Gradle) and includes a shell script (
scripts/verify-migration.sh) to perform environment verification and run project tests. These operations are standard for software development and are executed within the context of the user's project.
Audit Metadata