qa-spring-test-writer
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's functionality is limited to generating boilerplate Java test code for Spring Boot applications based on provided specifications. It does not perform network operations, access sensitive credentials, or attempt to execute generated code autonomously. All recommended dependencies (Spring Boot, TestContainers) are industry-standard and well-known.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a theoretical surface for indirect prompt injection because it ingests external data (test case specifications, requirements, or API contracts) to generate code. However, given that it does not execute the generated code and the primary purpose is template generation for developers, this surface is considered safe under normal usage conditions.
- Ingestion points: Reads test cases from specifications, requirements, or API contracts as noted in SKILL.md.
- Boundary markers: Not explicitly defined; the agent is instructed to transform structured test cases into executable files.
- Capability inventory: Limited to writing Java files to the specified 'tests/integration' directory.
- Sanitization: Not explicitly defined in the provided instruction files.
Audit Metadata