spring-boot-engineer
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides coding templates that follow industry-standard security practices for Spring Boot applications, including the use of Bean Validation (@Valid, @NotBlank) for all API inputs and BCrypt for password hashing.
- [SAFE]: Instructions explicitly prohibit high-risk behaviors such as hardcoding credentials or secrets in application properties files, recommending environment variables or dedicated configuration servers instead.
- [SAFE]: The Spring Security 6 configurations include CSRF protection (via CookieCsrfTokenRepository) and CORS configuration as standard practice for web services.
- [SAFE]: No obfuscation, prompt injection attempts, or unauthorized persistence mechanisms were detected across the provided implementation guides and reference files.
- [SAFE]: The command execution patterns mentioned (e.g., running Maven or Gradle tests) are standard development workflow tasks and do not involve piped remote code or unverifiable sources.
Audit Metadata