mapper-creator
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the project's source code, specifically through the
get_entity_detailsandlist_class_memberstool calls inSKILL.md. This data is used to generate mapping logic and determine build file modifications. - Ingestion points: Data enters the agent context via
get_entity_details(entityFqn)andlist_class_members(dtoFqn)calls in Step 2 ofSKILL.md. - Boundary markers: Absent. The instructions do not specify the use of delimiters or 'ignore' instructions when processing the content of these files.
- Capability inventory: The skill utilizes an
Edittool to modify project build files (pom.xml,build.gradle,build.gradle.kts) and generates new Java/Kotlin source files. - Sanitization: Absent. There is no mention of escaping or validating the content of the read class members before interpolating them into the mapper templates.
- [COMMAND_EXECUTION]: The skill is designed to programmatically modify core project configuration files. In Step 5 of
SKILL.md, it instructs the agent to use theEdittool to insert MapStruct dependencies (org.mapstruct:mapstructandorg.mapstruct:mapstruct-processor) into thebuild.gradle,build.gradle.kts, orpom.xmlfiles based on the project's build system.
Audit Metadata