java-cleanup
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard Java development tools via Maven (
mvn checkstyle:check,mvn pmd:check,mvn spotbugs:check). These are legitimate commands used for code quality analysis in Java environments.\n- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it is designed to ingest and process untrusted Java source code.\n - Ingestion points: Java source files from the user's workspace.\n
- Boundary markers: Absent; the skill does not explicitly define delimiters for the code it processes.\n
- Capability inventory: Execution of Maven build and analysis plugins.\n
- Sanitization: None; the skill assumes the source code is data to be refactored, not a source of instructions.
Audit Metadata