deploying-java-sdk-bundles
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of technical documentation and configuration examples for packaging Java code.
- [EXTERNAL_DOWNLOADS]: Mentions the use of
mavenCentral()and the official Apache Software Foundation snapshot repository (https://repository.apache.org/content/repositories/snapshots/) for resolving dependencies. These are trusted and well-known services for Java development. - [COMMAND_EXECUTION]: Provides standard commands for software building and environment setup, such as
./gradlew bundle,mvn package, and Astro CLI commands (astro dev start). These are necessary for the skill's primary purpose and do not exhibit malicious patterns. - [SAFE]: The included Dockerfile examples demonstrate security best practices by using
USER rootonly for system package installation and returning to a non-privileged user (USER airflow) for runtime execution.
Audit Metadata