maven-tools
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSNO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references an external dependency, the Maven Tools MCP server, from the author's repository (arvindand/maven-tools-mcp). This is a legitimate requirement for the skill's intended purpose.
- [NO_CODE]: The skill consists entirely of a configuration manifest and natural language instructions. It does not package or execute any local scripts, binaries, or compiled code.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to read and process user-supplied build configuration files such as pom.xml. This creates a surface for indirect prompt injection, though the risk is addressed by the skill's workflow, which uses dedicated tools to resolve dependencies into structured data for agent reasoning.
Audit Metadata